Technical Information
Modifies file system
Creates the following files
- <Current directory>\orlmhaayzw.exe
- <Current directory>\ieldkigxaw.exe
- <Current directory>\surulfanie.exe
- <Current directory>\fnyrxkewss.exe
- <Current directory>\snnojhqfbh.exe
- <Current directory>\ffvlvmvglv.exe
- <Current directory>\pviuwigfbv.exe
- <Current directory>\leuijkeets.exe
- <Current directory>\fjveuffuff.exe
- <Current directory>\ywjfuprncg.exe
- <Current directory>\osibeperht.exe
- <Current directory>\yansxtpipt.exe
- <Current directory>\efgwgprvdg.exe
- <Current directory>\boaksqpvdu.exe
- <Current directory>\ejjjitpqqt.exe
- nul
- <Current directory>\hmaiywytlj.exe
- <Current directory>\ecujdkktrt.exe
- <Current directory>\wbivtbmdpf.exe
Deletes the following files
- <Current directory>\orlmhaayzw.exe
- <Current directory>\fjveuffuff.exe
- <Current directory>\surulfanie.exe
- <Current directory>\fnyrxkewss.exe
- <Current directory>\snnojhqfbh.exe
- <Current directory>\ffvlvmvglv.exe
- <Current directory>\pviuwigfbv.exe
- <Current directory>\leuijkeets.exe
- <Current directory>\ywjfuprncg.exe
- <Current directory>\ecujdkktrt.exe
- <Current directory>\osibeperht.exe
- <Current directory>\yansxtpipt.exe
- <Current directory>\efgwgprvdg.exe
- <Current directory>\boaksqpvdu.exe
- <Current directory>\ejjjitpqqt.exe
- <Current directory>\hmaiywytlj.exe
- <Current directory>\ieldkigxaw.exe
- <Current directory>\wbivtbmdpf.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\orlmhaayzw.exe'
- '<Current directory>\ieldkigxaw.exe'
- '<Current directory>\surulfanie.exe'
- '<Current directory>\fnyrxkewss.exe'
- '<Current directory>\snnojhqfbh.exe'
- '<Current directory>\ffvlvmvglv.exe'
- '<Current directory>\pviuwigfbv.exe'
- '<Current directory>\leuijkeets.exe'
- '<Current directory>\ywjfuprncg.exe'
- '<Current directory>\ecujdkktrt.exe'
- '<Current directory>\osibeperht.exe'
- '<Current directory>\yansxtpipt.exe'
- '<Current directory>\efgwgprvdg.exe'
- '<Current directory>\boaksqpvdu.exe'
- '<Current directory>\ejjjitpqqt.exe'
- '<Current directory>\hmaiywytlj.exe'
- '<Current directory>\fjveuffuff.exe'
- '<Current directory>\wbivtbmdpf.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QZXCKRVLVV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GCYMPXAXGF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TVFJAUEGQT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GNVGMZIPZI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PDAPNVCGHI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZTNHGAOEYI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WBIVTBMDPF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FJVEUFFUFF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IELDKIGXAW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SURULFANIE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FNYRXKEWSS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SNNOJHQFBH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FFVLVMVGLV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PVIUWIGFBV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LEUIJKEETS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YWJFUPRNCG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ECUJDKKTRT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OSIBEPERHT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YANSXTPIPT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EFGWGPRVDG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BOAKSQPVDU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EJJJITPQQT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HMAIYWYTLJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ORLMHAAYZW.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GKKTJVJNNV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TRCWYQFEDG.exe"
