Technical Information
Modifies file system
Creates the following files
- <Current directory>\qggbquagwr.exe
- <Current directory>\sovkwxazkb.exe
- <Current directory>\fgchicejup.exe
- <Current directory>\owpqjyyzkp.exe
- <Current directory>\ymuicckxsq.exe
- <Current directory>\lfkfozogbe.exe
- <Current directory>\lxyytcervo.exe
- <Current directory>\ufmhugyhlp.exe
- <Current directory>\blxuvcrvzb.exe
- <Current directory>\oleqpheejp.exe
- <Current directory>\eonsteaqms.exe
- <Current directory>\hjerjhjshq.exe
- <Current directory>\uclovmnuqe.exe
- <Current directory>\hutlgkrdab.exe
- <Current directory>\hnhemmintd.exe
- <Current directory>\nsaiupjbiq.exe
- nul
- <Current directory>\xiganmvrqq.exe
- <Current directory>\iyitvsgjca.exe
- <Current directory>\vgawjvcase.exe
Deletes the following files
- <Current directory>\qggbquagwr.exe
- <Current directory>\sovkwxazkb.exe
- <Current directory>\fgchicejup.exe
- <Current directory>\ymuicckxsq.exe
- <Current directory>\owpqjyyzkp.exe
- <Current directory>\lfkfozogbe.exe
- <Current directory>\lxyytcervo.exe
- <Current directory>\ufmhugyhlp.exe
- <Current directory>\iyitvsgjca.exe
- <Current directory>\blxuvcrvzb.exe
- <Current directory>\eonsteaqms.exe
- <Current directory>\hjerjhjshq.exe
- <Current directory>\uclovmnuqe.exe
- <Current directory>\hutlgkrdab.exe
- <Current directory>\hnhemmintd.exe
- <Current directory>\nsaiupjbiq.exe
- <Current directory>\xiganmvrqq.exe
- <Current directory>\oleqpheejp.exe
- <Current directory>\vgawjvcase.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\qggbquagwr.exe'
- '<Current directory>\sovkwxazkb.exe'
- '<Current directory>\fgchicejup.exe'
- '<Current directory>\owpqjyyzkp.exe'
- '<Current directory>\ymuicckxsq.exe'
- '<Current directory>\lfkfozogbe.exe'
- '<Current directory>\lxyytcervo.exe'
- '<Current directory>\ufmhugyhlp.exe'
- '<Current directory>\iyitvsgjca.exe'
- '<Current directory>\blxuvcrvzb.exe'
- '<Current directory>\eonsteaqms.exe'
- '<Current directory>\hjerjhjshq.exe'
- '<Current directory>\uclovmnuqe.exe'
- '<Current directory>\hutlgkrdab.exe'
- '<Current directory>\hnhemmintd.exe'
- '<Current directory>\nsaiupjbiq.exe'
- '<Current directory>\xiganmvrqq.exe'
- '<Current directory>\oleqpheejp.exe'
- '<Current directory>\vgawjvcase.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LQNFIRICCE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VGAWJVCASE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IYITVSGJCA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SOVKWXAZKB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FGCHICEJUP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OWPQJYYZKP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YMUICCKXSQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LFKFOZOGBE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LXYYTCERVO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UFMHUGYHLP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BLXUVCRVZB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OLEQPHEEJP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EONSTEAQMS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HJERJHJSHQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UCLOVMNUQE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HUTLGKRDAB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HNHEMMINTD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NSAIUPJBIQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XIGANMVRQQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QGGBQUAGWR.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FSCAIVPWOR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SSVEOQDNED.exe"
