Technical Information
Modifies file system
Creates the following files
- <Current directory>\uevkkvkxnt.exe
- <Current directory>\chgebgvmef.exe
- <Current directory>\inrikcoasr.exe
- <Current directory>\sdezdgiris.exe
- <Current directory>\clsjeltprs.exe
- <Current directory>\lbxafhnfhs.exe
- <Current directory>\ytmxrmroqh.exe
- <Current directory>\lltudjexav.exe
- <Current directory>\sreylnxdoh.exe
- <Current directory>\bhrpmjrbwi.exe
- <Current directory>\ozzmyovdgw.exe
- <Current directory>\scqloregbu.exe
- <Current directory>\bkvcpnpwjv.exe
- <Current directory>\laimisjuzv.exe
- <Current directory>\ytpiupnvjj.exe
- <Current directory>\hjcavthurs.exe
- <Current directory>\ooneexazfw.exe
- nul
- <Current directory>\bhvbpufips.exe
- <Current directory>\kxisryyhft.exe
- <Current directory>\ppzhqbrluj.exe
- <Current directory>\coskweeclu.exe
Deletes the following files
- <Current directory>\uevkkvkxnt.exe
- <Current directory>\inrikcoasr.exe
- <Current directory>\sdezdgiris.exe
- <Current directory>\clsjeltprs.exe
- <Current directory>\lbxafhnfhs.exe
- <Current directory>\ytmxrmroqh.exe
- <Current directory>\lltudjexav.exe
- <Current directory>\sreylnxdoh.exe
- <Current directory>\bhrpmjrbwi.exe
- <Current directory>\ozzmyovdgw.exe
- <Current directory>\bkvcpnpwjv.exe
- <Current directory>\scqloregbu.exe
- <Current directory>\laimisjuzv.exe
- <Current directory>\ytpiupnvjj.exe
- <Current directory>\hjcavthurs.exe
- <Current directory>\bhvbpufips.exe
- <Current directory>\ooneexazfw.exe
- <Current directory>\kxisryyhft.exe
- <Current directory>\chgebgvmef.exe
- <Current directory>\ppzhqbrluj.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\uevkkvkxnt.exe'
- '<Current directory>\chgebgvmef.exe'
- '<Current directory>\inrikcoasr.exe'
- '<Current directory>\sdezdgiris.exe'
- '<Current directory>\clsjeltprs.exe'
- '<Current directory>\lbxafhnfhs.exe'
- '<Current directory>\ytmxrmroqh.exe'
- '<Current directory>\lltudjexav.exe'
- '<Current directory>\sreylnxdoh.exe'
- '<Current directory>\ppzhqbrluj.exe'
- '<Current directory>\bhrpmjrbwi.exe'
- '<Current directory>\scqloregbu.exe'
- '<Current directory>\bkvcpnpwjv.exe'
- '<Current directory>\laimisjuzv.exe'
- '<Current directory>\ytpiupnvjj.exe'
- '<Current directory>\hjcavthurs.exe'
- '<Current directory>\ooneexazfw.exe'
- '<Current directory>\bhvbpufips.exe'
- '<Current directory>\kxisryyhft.exe'
- '<Current directory>\ozzmyovdgw.exe'
- '<Current directory>\coskweeclu.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\COSKWEECLU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PPZHQBRLUJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CHGEBGVMEF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\INRIKCOASR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SDEZDGIRIS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CLSJELTPRS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LBXAFHNFHS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YTMXRMROQH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LLTUDJEXAV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SREYLNXDOH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZTBMGBVHQW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BHRPMJRBWI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SCQLOREGBU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BKVCPNPWJV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LAIMISJUZV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YTPIUPNVJJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HJCAVTHURS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OONEEXAZFW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BHVBPUFIPS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KXISRYYHFT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UEVKKVKXNT.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OZZMYOVDGW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MBUPUWRYGI.exe"
