Technical Information
Modifies file system
Creates the following files
- <Current directory>\ygkjremxvo.exe
- <Current directory>\aozsyglrry.exe
- <Current directory>\djqrwjummo.exe
- <Current directory>\nzvjpngkup.exe
- <Current directory>\wpjsqjabkp.exe
- <Current directory>\gxwjjolzsp.exe
- <Current directory>\jlbcetlmgy.exe
- <Current directory>\tipgxkkddm.exe
- <Current directory>\wlizqqpnqn.exe
- <Current directory>\jomphxkgtl.exe
- <Current directory>\mrdoxasjgc.exe
- <Current directory>\mcshdubuzn.exe
- <Current directory>\ikmnpeztzb.exe
- nul
- <Current directory>\pqxzyzazno.exe
- <Current directory>\cibdztibfz.exe
- <Current directory>\ksbxwgynvl.exe
Deletes the following files
- <Current directory>\ygkjremxvo.exe
- <Current directory>\pqxzyzazno.exe
- <Current directory>\ikmnpeztzb.exe
- <Current directory>\mcshdubuzn.exe
- <Current directory>\mrdoxasjgc.exe
- <Current directory>\jomphxkgtl.exe
- <Current directory>\cibdztibfz.exe
- <Current directory>\wlizqqpnqn.exe
- <Current directory>\jlbcetlmgy.exe
- <Current directory>\gxwjjolzsp.exe
- <Current directory>\wpjsqjabkp.exe
- <Current directory>\nzvjpngkup.exe
- <Current directory>\djqrwjummo.exe
- <Current directory>\aozsyglrry.exe
- <Current directory>\tipgxkkddm.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\ygkjremxvo.exe'
- '<Current directory>\pqxzyzazno.exe'
- '<Current directory>\ikmnpeztzb.exe'
- '<Current directory>\mcshdubuzn.exe'
- '<Current directory>\mrdoxasjgc.exe'
- '<Current directory>\jomphxkgtl.exe'
- '<Current directory>\cibdztibfz.exe'
- '<Current directory>\wlizqqpnqn.exe'
- '<Current directory>\jlbcetlmgy.exe'
- '<Current directory>\gxwjjolzsp.exe'
- '<Current directory>\wpjsqjabkp.exe'
- '<Current directory>\nzvjpngkup.exe'
- '<Current directory>\djqrwjummo.exe'
- '<Current directory>\aozsyglrry.exe'
- '<Current directory>\tipgxkkddm.exe'
- '<Current directory>\ksbxwgynvl.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TIPGXKKDDM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AOZSYGLRRY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DJQRWJUMMO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NZVJPNGKUP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WPJSQJABKP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GXWJJOLZSP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JLBCETLMGY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KSBXWGYNVL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WLIZQQPNQN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JOMPHXKGTL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MRDOXASJGC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MCSHDUBUZN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IKMNPEZTZB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PQXZYZAZNO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YGKJREMXVO.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CIBDZTIBFZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HXLYGDQSAN.exe"
