Technical Information
Modifies file system
Creates the following files
- <Current directory>\fzmbzclhpk.exe
- <Current directory>\ntyvrgvwgo.exe
- <Current directory>\tzizrjokva.exe
- <Current directory>\gzqwlobtex.exe
- <Current directory>\tsxtxlfuol.exe
- <Current directory>\dikkyqzswl.exe
- <Current directory>\tlumuoveho.exe
- <Current directory>\cshevshdpo.exe
- <Current directory>\ptoahptmzk.exe
- <Current directory>\clwxbuxnjy.exe
- <Current directory>\mtjhuqrlzz.exe
- <Current directory>\wrotniqkvm.exe
- <Current directory>\cwkrywofcb.exe
- <Current directory>\cphceyepvm.exe
- <Current directory>\phozpviqfa.exe
- <Current directory>\fkqjutfkqk.exe
- <Current directory>\skfgfyrtay.exe
- <Current directory>\fdmurvvcjn.exe
- <Current directory>\svurlbadtb.exe
- <Current directory>\pdofqcxdlx.exe
- nul
- <Current directory>\cevcjzkmum.exe
- <Current directory>\owdzveovma.exe
- <Current directory>\mmxaztzvsb.exe
- <Current directory>\qldheexxhz.exe
Deletes the following files
- <Current directory>\fzmbzclhpk.exe
- <Current directory>\tzizrjokva.exe
- <Current directory>\gzqwlobtex.exe
- <Current directory>\tsxtxlfuol.exe
- <Current directory>\dikkyqzswl.exe
- <Current directory>\tlumuoveho.exe
- <Current directory>\cshevshdpo.exe
- <Current directory>\clwxbuxnjy.exe
- <Current directory>\ptoahptmzk.exe
- <Current directory>\mtjhuqrlzz.exe
- <Current directory>\wrotniqkvm.exe
- <Current directory>\cwkrywofcb.exe
- <Current directory>\cphceyepvm.exe
- <Current directory>\phozpviqfa.exe
- <Current directory>\fkqjutfkqk.exe
- <Current directory>\fdmurvvcjn.exe
- <Current directory>\skfgfyrtay.exe
- <Current directory>\svurlbadtb.exe
- <Current directory>\pdofqcxdlx.exe
- <Current directory>\cevcjzkmum.exe
- <Current directory>\owdzveovma.exe
- <Current directory>\mmxaztzvsb.exe
- <Current directory>\ntyvrgvwgo.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\fzmbzclhpk.exe'
- '<Current directory>\ntyvrgvwgo.exe'
- '<Current directory>\tzizrjokva.exe'
- '<Current directory>\gzqwlobtex.exe'
- '<Current directory>\tsxtxlfuol.exe'
- '<Current directory>\dikkyqzswl.exe'
- '<Current directory>\tlumuoveho.exe'
- '<Current directory>\cshevshdpo.exe'
- '<Current directory>\ptoahptmzk.exe'
- '<Current directory>\clwxbuxnjy.exe'
- '<Current directory>\mtjhuqrlzz.exe'
- '<Current directory>\cwkrywofcb.exe'
- '<Current directory>\mmxaztzvsb.exe'
- '<Current directory>\cphceyepvm.exe'
- '<Current directory>\phozpviqfa.exe'
- '<Current directory>\fkqjutfkqk.exe'
- '<Current directory>\skfgfyrtay.exe'
- '<Current directory>\fdmurvvcjn.exe'
- '<Current directory>\svurlbadtb.exe'
- '<Current directory>\pdofqcxdlx.exe'
- '<Current directory>\cevcjzkmum.exe'
- '<Current directory>\owdzveovma.exe'
- '<Current directory>\wrotniqkvm.exe'
- '<Current directory>\qldheexxhz.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WROTNIQKVM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NTYVRGVWGO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TZIZRJOKVA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GZQWLOBTEX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TSXTXLFUOL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DIKKYQZSWL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TLUMUOVEHO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CSHEVSHDPO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PTOAHPTMZK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CLWXBUXNJY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MTJHUQRLZZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QLDHEEXXHZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CWKRYWOFCB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CPHCEYEPVM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PHOZPVIQFA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FKQJUTFKQK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SKFGFYRTAY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FDMURVVCJN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SVURLBADTB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PDOFQCXDLX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CEVCJZKMUM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OWDZVEOVMA.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FZMBZCLHPK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MMXAZTZVSB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QAOVZCHNNX.exe"
