Technical Information
Modifies file system
Creates the following files
- <Current directory>\tviopvqyyx.exe
- <Current directory>\oqafsefwzx.exe
- <Current directory>\xyoolayupy.exe
- <Current directory>\hnbfmfklxy.exe
- <Current directory>\rdgxfbejny.exe
- <Current directory>\altghfqavz.exe
- <Current directory>\hrespjrnkl.exe
- <Current directory>\kuvrfesifj.exe
- <Current directory>\qagvohtotw.exe
- <Current directory>\dsvsznxxdk.exe
- <Current directory>\niajbjrvlk.exe
- <Current directory>\xqntundmbl.exe
- <Current directory>\aleasqmpoj.exe
- <Current directory>\jbrjlnxfek.exe
- <Current directory>\qhcvtqztsw.exe
- nul
- <Current directory>\dzksfvduck.exe
- <Current directory>\jfvworehqx.exe
- <Current directory>\lukycbebmz.exe
- <Current directory>\befobxkdwy.exe
Deletes the following files
- <Current directory>\tviopvqyyx.exe
- <Current directory>\xyoolayupy.exe
- <Current directory>\hnbfmfklxy.exe
- <Current directory>\rdgxfbejny.exe
- <Current directory>\altghfqavz.exe
- <Current directory>\hrespjrnkl.exe
- <Current directory>\qagvohtotw.exe
- <Current directory>\kuvrfesifj.exe
- <Current directory>\dsvsznxxdk.exe
- <Current directory>\niajbjrvlk.exe
- <Current directory>\xqntundmbl.exe
- <Current directory>\aleasqmpoj.exe
- <Current directory>\jbrjlnxfek.exe
- <Current directory>\qhcvtqztsw.exe
- <Current directory>\dzksfvduck.exe
- <Current directory>\jfvworehqx.exe
- <Current directory>\lukycbebmz.exe
- <Current directory>\oqafsefwzx.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\tviopvqyyx.exe'
- '<Current directory>\oqafsefwzx.exe'
- '<Current directory>\xyoolayupy.exe'
- '<Current directory>\hnbfmfklxy.exe'
- '<Current directory>\rdgxfbejny.exe'
- '<Current directory>\altghfqavz.exe'
- '<Current directory>\hrespjrnkl.exe'
- '<Current directory>\kuvrfesifj.exe'
- '<Current directory>\lukycbebmz.exe'
- '<Current directory>\qagvohtotw.exe'
- '<Current directory>\niajbjrvlk.exe'
- '<Current directory>\xqntundmbl.exe'
- '<Current directory>\aleasqmpoj.exe'
- '<Current directory>\jbrjlnxfek.exe'
- '<Current directory>\qhcvtqztsw.exe'
- '<Current directory>\dzksfvduck.exe'
- '<Current directory>\jfvworehqx.exe'
- '<Current directory>\dsvsznxxdk.exe'
- '<Current directory>\befobxkdwy.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BEFOBXKDWY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LUKYCBEBMZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OQAFSEFWZX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XYOOLAYUPY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HNBFMFKLXY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RDGXFBEJNY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ALTGHFQAVZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HRESPJRNKL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KUVRFESIFJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OMXSPAGUNK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QAGVOHTOTW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NIAJBJRVLK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XQNTUNDMBL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ALEASQMPOJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JBRJLNXFEK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QHCVTQZTSW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DZKSFVDUCK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JFVWOREHQX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TVIOPVQYYX.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DSVSZNXXDK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BMIVWVUTDW.exe"
