Technical Information
Modifies file system
Creates the following files
- <Current directory>\fvvbnlaedp.exe
- <Current directory>\aiwsrupveq.exe
- <Current directory>\kybbkyjtmq.exe
- <Current directory>\tootlvurcq.exe
- <Current directory>\qwjhqwsrtf.exe
- <Current directory>\dpqejbwsdb.exe
- <Current directory>\nedncyqqtb.exe
- <Current directory>\tkozlbjwho.exe
- <Current directory>\mioafcplgo.exe
- <Current directory>\wqtrggjjop.exe
- <Current directory>\jqjosdnsxd.exe
- <Current directory>\wjqleizthr.exe
- <Current directory>\fjsokhbcqc.exe
- nul
- <Current directory>\pzffdlnayd.exe
- <Current directory>\zpkpfqhrod.exe
- <Current directory>\xnfttrgajr.exe
- <Current directory>\qhuhknnuuf.exe
Deletes the following files
- <Current directory>\fvvbnlaedp.exe
- <Current directory>\zpkpfqhrod.exe
- <Current directory>\pzffdlnayd.exe
- <Current directory>\fjsokhbcqc.exe
- <Current directory>\wjqleizthr.exe
- <Current directory>\jqjosdnsxd.exe
- <Current directory>\wqtrggjjop.exe
- <Current directory>\mioafcplgo.exe
- <Current directory>\tkozlbjwho.exe
- <Current directory>\dpqejbwsdb.exe
- <Current directory>\nedncyqqtb.exe
- <Current directory>\tootlvurcq.exe
- <Current directory>\qwjhqwsrtf.exe
- <Current directory>\kybbkyjtmq.exe
- <Current directory>\aiwsrupveq.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\fvvbnlaedp.exe'
- '<Current directory>\aiwsrupveq.exe'
- '<Current directory>\kybbkyjtmq.exe'
- '<Current directory>\tootlvurcq.exe'
- '<Current directory>\qwjhqwsrtf.exe'
- '<Current directory>\dpqejbwsdb.exe'
- '<Current directory>\nedncyqqtb.exe'
- '<Current directory>\xnfttrgajr.exe'
- '<Current directory>\tkozlbjwho.exe'
- '<Current directory>\wqtrggjjop.exe'
- '<Current directory>\jqjosdnsxd.exe'
- '<Current directory>\wjqleizthr.exe'
- '<Current directory>\fjsokhbcqc.exe'
- '<Current directory>\pzffdlnayd.exe'
- '<Current directory>\zpkpfqhrod.exe'
- '<Current directory>\mioafcplgo.exe'
- '<Current directory>\qhuhknnuuf.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XNFTTRGAJR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AIWSRUPVEQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KYBBKYJTMQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TOOTLVURCQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QWJHQWSRTF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DPQEJBWSDB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NEDNCYQQTB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TKOZLBJWHO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MIOAFCPLGO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WQTRGGJJOP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JQJOSDNSXD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WJQLEIZTHR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FJSOKHBCQC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PZFFDLNAYD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZPKPFQHROD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FVVBNLAEDP.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QHUHKNNUUF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UZABFMPNDQ.exe"
