Technical Information
Modifies file system
Creates the following files
- <Current directory>\fzvwqlinis.exe
- <Current directory>\ghkyfnihec.exe
- <Current directory>\tzrursminr.exe
- <Current directory>\dpemkpggwr.exe
- <Current directory>\qhljdukpff.exe
- <Current directory>\datxprwqpb.exe
- <Current directory>\gdkefuxtks.exe
- <Current directory>\plxngyrkss.exe
- <Current directory>\cleksvvtbp.exe
- <Current directory>\mtrctzpjrp.exe
- <Current directory>\zuyyfwtsbd.exe
- <Current directory>\pwaajcpmef.exe
- <Current directory>\ssrzzxyhze.exe
- <Current directory>\chersckfhe.exe
- <Current directory>\mpratgewxf.exe
- <Current directory>\vfwsucqunf.exe
- <Current directory>\zbnqkfypad.exe
- nul
- <Current directory>\iraiejknqe.exe
- <Current directory>\pwlmmfltfq.exe
- <Current directory>\tocblqeyuo.exe
- <Current directory>\njjxdmcsgc.exe
Deletes the following files
- <Current directory>\fzvwqlinis.exe
- <Current directory>\tocblqeyuo.exe
- <Current directory>\tzrursminr.exe
- <Current directory>\dpemkpggwr.exe
- <Current directory>\qhljdukpff.exe
- <Current directory>\datxprwqpb.exe
- <Current directory>\gdkefuxtks.exe
- <Current directory>\plxngyrkss.exe
- <Current directory>\cleksvvtbp.exe
- <Current directory>\ghkyfnihec.exe
- <Current directory>\mtrctzpjrp.exe
- <Current directory>\pwaajcpmef.exe
- <Current directory>\ssrzzxyhze.exe
- <Current directory>\chersckfhe.exe
- <Current directory>\mpratgewxf.exe
- <Current directory>\vfwsucqunf.exe
- <Current directory>\iraiejknqe.exe
- <Current directory>\zbnqkfypad.exe
- <Current directory>\pwlmmfltfq.exe
- <Current directory>\zuyyfwtsbd.exe
- <Current directory>\njjxdmcsgc.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\fzvwqlinis.exe'
- '<Current directory>\ghkyfnihec.exe'
- '<Current directory>\tzrursminr.exe'
- '<Current directory>\dpemkpggwr.exe'
- '<Current directory>\qhljdukpff.exe'
- '<Current directory>\datxprwqpb.exe'
- '<Current directory>\gdkefuxtks.exe'
- '<Current directory>\plxngyrkss.exe'
- '<Current directory>\cleksvvtbp.exe'
- '<Current directory>\tocblqeyuo.exe'
- '<Current directory>\mtrctzpjrp.exe'
- '<Current directory>\pwaajcpmef.exe'
- '<Current directory>\ssrzzxyhze.exe'
- '<Current directory>\chersckfhe.exe'
- '<Current directory>\mpratgewxf.exe'
- '<Current directory>\vfwsucqunf.exe'
- '<Current directory>\zbnqkfypad.exe'
- '<Current directory>\iraiejknqe.exe'
- '<Current directory>\pwlmmfltfq.exe'
- '<Current directory>\zuyyfwtsbd.exe'
- '<Current directory>\njjxdmcsgc.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TOCBLQEYUO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GHKYFNIHEC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TZRURSMINR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DPEMKPGGWR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QHLJDUKPFF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DATXPRWQPB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GDKEFUXTKS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PLXNGYRKSS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CLEKSVVTBP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MTRCTZPJRP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZUYYFWTSBD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PWAAJCPMEF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SSRZZXYHZE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CHERSCKFHE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MPRATGEWXF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VFWSUCQUNF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZBNQKFYPAD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IRAIEJKNQE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PWLMMFLTFQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FZVWQLINIS.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NJJXDMCSGC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XGINYPGYVR.exe"
