Technical Information
Modifies file system
Creates the following files
- <Current directory>\ffbbtiplfg.exe
- <Current directory>\qkpivmstqg.exe
- <Current directory>\gnrkzkpfbi.exe
- <Current directory>\tnghlptolx.exe
- <Current directory>\dvlqmlnmtf.exe
- <Current directory>\qwsnyqrodt.exe
- <Current directory>\doikjodxmi.exe
- <Current directory>\qgphdtiyww.exe
- <Current directory>\dzwdpqmhgs.exe
- <Current directory>\pzeabvyqpg.exe
- <Current directory>\zhrscrkgfh.exe
- <Current directory>\pkaugpoaij.exe
- <Current directory>\zaflztazzj.exe
- <Current directory>\pdpndrxkcu.exe
- <Current directory>\ffypixbenw.exe
- <Current directory>\sygmtugnxk.exe
- <Current directory>\jbhoyaczau.exe
- <Current directory>\zdrqcyhtlw.exe
- <Current directory>\pgaagvenoh.exe
- <Current directory>\fjcckbahaj.exe
- <Current directory>\imsbaejbmh.exe
- <Current directory>\zpcdfcgvyk.exe
- <Current directory>\ixhuggzmgk.exe
- <Current directory>\yaqxkewgru.exe
- nul
- <Current directory>\pcazoctzuw.exe
- <Current directory>\ahgyrgwznw.exe
- <Current directory>\kfwwmjrgcu.exe
Deletes the following files
- <Current directory>\ffbbtiplfg.exe
- <Current directory>\qkpivmstqg.exe
- <Current directory>\gnrkzkpfbi.exe
- <Current directory>\tnghlptolx.exe
- <Current directory>\dvlqmlnmtf.exe
- <Current directory>\qwsnyqrodt.exe
- <Current directory>\doikjodxmi.exe
- <Current directory>\qgphdtiyww.exe
- <Current directory>\pzeabvyqpg.exe
- <Current directory>\dzwdpqmhgs.exe
- <Current directory>\zhrscrkgfh.exe
- <Current directory>\zaflztazzj.exe
- <Current directory>\kfwwmjrgcu.exe
- <Current directory>\pkaugpoaij.exe
- <Current directory>\sygmtugnxk.exe
- <Current directory>\ffypixbenw.exe
- <Current directory>\jbhoyaczau.exe
- <Current directory>\pgaagvenoh.exe
- <Current directory>\zdrqcyhtlw.exe
- <Current directory>\imsbaejbmh.exe
- <Current directory>\fjcckbahaj.exe
- <Current directory>\zpcdfcgvyk.exe
- <Current directory>\ixhuggzmgk.exe
- <Current directory>\yaqxkewgru.exe
- <Current directory>\pcazoctzuw.exe
- <Current directory>\pdpndrxkcu.exe
- <Current directory>\ahgyrgwznw.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\ffbbtiplfg.exe'
- '<Current directory>\qkpivmstqg.exe'
- '<Current directory>\gnrkzkpfbi.exe'
- '<Current directory>\tnghlptolx.exe'
- '<Current directory>\dvlqmlnmtf.exe'
- '<Current directory>\qwsnyqrodt.exe'
- '<Current directory>\doikjodxmi.exe'
- '<Current directory>\qgphdtiyww.exe'
- '<Current directory>\dzwdpqmhgs.exe'
- '<Current directory>\pzeabvyqpg.exe'
- '<Current directory>\zhrscrkgfh.exe'
- '<Current directory>\pkaugpoaij.exe'
- '<Current directory>\ahgyrgwznw.exe'
- '<Current directory>\zaflztazzj.exe'
- '<Current directory>\ffypixbenw.exe'
- '<Current directory>\sygmtugnxk.exe'
- '<Current directory>\jbhoyaczau.exe'
- '<Current directory>\zdrqcyhtlw.exe'
- '<Current directory>\pgaagvenoh.exe'
- '<Current directory>\fjcckbahaj.exe'
- '<Current directory>\imsbaejbmh.exe'
- '<Current directory>\zpcdfcgvyk.exe'
- '<Current directory>\ixhuggzmgk.exe'
- '<Current directory>\yaqxkewgru.exe'
- '<Current directory>\pcazoctzuw.exe'
- '<Current directory>\pdpndrxkcu.exe'
- '<Current directory>\kfwwmjrgcu.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AHGYRGWZNW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QKPIVMSTQG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GNRKZKPFBI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TNGHLPTOLX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DVLQMLNMTF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QWSNYQRODT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DOIKJODXMI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QGPHDTIYWW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DZWDPQMHGS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PZEABVYQPG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZHRSCRKGFH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PKAUGPOAIJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZAFLZTAZZJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PDPNDRXKCU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FFYPIXBENW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SYGMTUGNXK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JBHOYACZAU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZDRQCYHTLW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PGAAGVENOH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FJCCKBAHAJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IMSBAEJBMH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZPCDFCGVYK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IXHUGGZMGK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YAQXKEWGRU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PCAZOCTZUW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FFBBTIPLFG.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KFWWMJRGCU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XMPZBLNWSG.exe"
