Technical Information
Modifies file system
Creates the following files
- <Current directory>\wujmhbrmir.exe
- <Current directory>\oeapsjnape.exe
- <Current directory>\raroimovcc.exe
- <Current directory>\aqegjqitsc.exe
- <Current directory>\kgrxcntkad.exe
- <Current directory>\qlcblqvxop.exe
- <Current directory>\atptmvgoeq.exe
- <Current directory>\hzaxvqibtc.exe
- <Current directory>\epvgrntczd.exe
- <Current directory>\grpqssymmf.exe
- <Current directory>\niwogyikub.exe
- <Current directory>\aielsvmldq.exe
- <Current directory>\ddujiyvoqo.exe
- <Current directory>\tgetmeszbq.exe
- <Current directory>\zmpxuztnqd.exe
- nul
- <Current directory>\jccpoefdyd.exe
- <Current directory>\kngpivzhzd.exe
- <Current directory>\rwnjfiptpp.exe
Deletes the following files
- <Current directory>\wujmhbrmir.exe
- <Current directory>\raroimovcc.exe
- <Current directory>\aqegjqitsc.exe
- <Current directory>\kgrxcntkad.exe
- <Current directory>\qlcblqvxop.exe
- <Current directory>\hzaxvqibtc.exe
- <Current directory>\atptmvgoeq.exe
- <Current directory>\oeapsjnape.exe
- <Current directory>\grpqssymmf.exe
- <Current directory>\niwogyikub.exe
- <Current directory>\aielsvmldq.exe
- <Current directory>\ddujiyvoqo.exe
- <Current directory>\tgetmeszbq.exe
- <Current directory>\zmpxuztnqd.exe
- <Current directory>\jccpoefdyd.exe
- <Current directory>\kngpivzhzd.exe
- <Current directory>\epvgrntczd.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\wujmhbrmir.exe'
- '<Current directory>\oeapsjnape.exe'
- '<Current directory>\raroimovcc.exe'
- '<Current directory>\aqegjqitsc.exe'
- '<Current directory>\kgrxcntkad.exe'
- '<Current directory>\qlcblqvxop.exe'
- '<Current directory>\atptmvgoeq.exe'
- '<Current directory>\hzaxvqibtc.exe'
- '<Current directory>\grpqssymmf.exe'
- '<Current directory>\kngpivzhzd.exe'
- '<Current directory>\niwogyikub.exe'
- '<Current directory>\aielsvmldq.exe'
- '<Current directory>\ddujiyvoqo.exe'
- '<Current directory>\tgetmeszbq.exe'
- '<Current directory>\zmpxuztnqd.exe'
- '<Current directory>\jccpoefdyd.exe'
- '<Current directory>\epvgrntczd.exe'
- '<Current directory>\rwnjfiptpp.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RWNJFIPTPP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EPVGRNTCZD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OEAPSJNAPE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RAROIMOVCC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AQEGJQITSC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KGRXCNTKAD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QLCBLQVXOP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ATPTMVGOEQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HZAXVQIBTC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GRPQSSYMMF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KNGPIVZHZD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NIWOGYIKUB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AIELSVMLDQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DDUJIYVOQO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TGETMESZBQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZMPXUZTNQD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JCCPOEFDYD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WUJMHBRMIR.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UOTVSGRTXA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RTCWCDIYDC.exe"
