Technical Information
Modifies file system
Creates the following files
- <Current directory>\zxvdznqhva.exe
- <Current directory>\phimgjxifs.exe
- <Current directory>\mlrnigwnsc.exe
- nul
- <Current directory>\gnspcaepkf.exe
- <Current directory>\wffybeszue.exe
- <Current directory>\mpshiahbme.exe
- <Current directory>\nedncyqqtb.exe
- <Current directory>\xjfrbydmop.exe
- <Current directory>\ntsiatjogo.exe
- <Current directory>\dlfrhxyyqo.exe
- <Current directory>\npgvxpluub.exe
- <Current directory>\dabeetrveb.exe
- <Current directory>\qhuhknnuuf.exe
- <Current directory>\hzhxrrtwme.exe
- <Current directory>\xjugqnhxwe.exe
Deletes the following files
- <Current directory>\zxvdznqhva.exe
- <Current directory>\phimgjxifs.exe
- <Current directory>\gnspcaepkf.exe
- <Current directory>\mlrnigwnsc.exe
- <Current directory>\wffybeszue.exe
- <Current directory>\mpshiahbme.exe
- <Current directory>\nedncyqqtb.exe
- <Current directory>\xjfrbydmop.exe
- <Current directory>\ntsiatjogo.exe
- <Current directory>\dlfrhxyyqo.exe
- <Current directory>\npgvxpluub.exe
- <Current directory>\qhuhknnuuf.exe
- <Current directory>\dabeetrveb.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\zxvdznqhva.exe'
- '<Current directory>\phimgjxifs.exe'
- '<Current directory>\mlrnigwnsc.exe'
- '<Current directory>\gnspcaepkf.exe'
- '<Current directory>\wffybeszue.exe'
- '<Current directory>\mpshiahbme.exe'
- '<Current directory>\nedncyqqtb.exe'
- '<Current directory>\xjfrbydmop.exe'
- '<Current directory>\ntsiatjogo.exe'
- '<Current directory>\dlfrhxyyqo.exe'
- '<Current directory>\npgvxpluub.exe'
- '<Current directory>\dabeetrveb.exe'
- '<Current directory>\qhuhknnuuf.exe'
- '<Current directory>\hzhxrrtwme.exe'
- '<Current directory>\xjugqnhxwe.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QHUHKNNUUF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DABEETRVEB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NPGVXPLUUB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DLFRHXYYQO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NTSIATJOGO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XJFRBYDMOP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HZHXRRTWME.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NEDNCYQQTB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WFFYBESZUE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GNSPCAEPKF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MLRNIGWNSC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PHIMGJXIFS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZXVDZNQHVA.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MPSHIAHBME.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XJUGQNHXWE.exe"
