Technical Information
Modifies file system
Creates the following files
- <Current directory>\iqrooxxlqd.exe
- <Current directory>\gnekchwmkr.exe
- <Current directory>\pdrcedqkar.exe
- <Current directory>\cvyrpiutko.exe
- <Current directory>\pognbfhvtc.exe
- <Current directory>\conkvkledq.exe
- <Current directory>\pgchghpnne.exe
- <Current directory>\czkesnbowb.exe
- <Current directory>\ievqbiuclf.exe
- <Current directory>\vfcmmnhdub.exe
- <Current directory>\ccnrvraqjo.exe
- <Current directory>\iigvdmbwxs.exe
- <Current directory>\sylmfrnunb.exe
- <Current directory>\coyeyvhlvb.exe
- <Current directory>\pggajslufp.exe
- <Current directory>\vmzeswmzuc.exe
- <Current directory>\fcewtsyykc.exe
- <Current directory>\lhxacwzdyo.exe
- nul
- <Current directory>\rnimkzsrmb.exe
- <Current directory>\wxrtjclwcr.exe
- <Current directory>\jfkwqfgnsc.exe
Deletes the following files
- <Current directory>\iqrooxxlqd.exe
- <Current directory>\wxrtjclwcr.exe
- <Current directory>\gnekchwmkr.exe
- <Current directory>\cvyrpiutko.exe
- <Current directory>\pognbfhvtc.exe
- <Current directory>\conkvkledq.exe
- <Current directory>\pgchghpnne.exe
- <Current directory>\czkesnbowb.exe
- <Current directory>\ievqbiuclf.exe
- <Current directory>\jfkwqfgnsc.exe
- <Current directory>\vfcmmnhdub.exe
- <Current directory>\iigvdmbwxs.exe
- <Current directory>\sylmfrnunb.exe
- <Current directory>\coyeyvhlvb.exe
- <Current directory>\pggajslufp.exe
- <Current directory>\vmzeswmzuc.exe
- <Current directory>\fcewtsyykc.exe
- <Current directory>\lhxacwzdyo.exe
- <Current directory>\rnimkzsrmb.exe
- <Current directory>\ccnrvraqjo.exe
- <Current directory>\pdrcedqkar.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\iqrooxxlqd.exe'
- '<Current directory>\gnekchwmkr.exe'
- '<Current directory>\pdrcedqkar.exe'
- '<Current directory>\cvyrpiutko.exe'
- '<Current directory>\pognbfhvtc.exe'
- '<Current directory>\conkvkledq.exe'
- '<Current directory>\pgchghpnne.exe'
- '<Current directory>\czkesnbowb.exe'
- '<Current directory>\ievqbiuclf.exe'
- '<Current directory>\wxrtjclwcr.exe'
- '<Current directory>\vfcmmnhdub.exe'
- '<Current directory>\iigvdmbwxs.exe'
- '<Current directory>\sylmfrnunb.exe'
- '<Current directory>\coyeyvhlvb.exe'
- '<Current directory>\pggajslufp.exe'
- '<Current directory>\vmzeswmzuc.exe'
- '<Current directory>\fcewtsyykc.exe'
- '<Current directory>\lhxacwzdyo.exe'
- '<Current directory>\rnimkzsrmb.exe'
- '<Current directory>\ccnrvraqjo.exe'
- '<Current directory>\jfkwqfgnsc.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WMCZEAULJO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JFKWQFGNSC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WXRTJCLWCR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GNEKCHWMKR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PDRCEDQKAR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CVYRPIUTKO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\POGNBFHVTC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CONKVKLEDQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PGCHGHPNNE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CZKESNBOWB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IEVQBIUCLF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VFCMMNHDUB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CCNRVRAQJO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IIGVDMBWXS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SYLMFRNUNB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\COYEYVHLVB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PGGAJSLUFP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VMZESWMZUC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FCEWTSYYKC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LHXACWZDYO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RNIMKZSRMB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IQROOXXLQD.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TJLBOXLIOQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GREECAHHEB.exe"
