Technical Information
Modifies file system
Creates the following files
- <Current directory>\emwmoyxyps.exe
- <Current directory>\fclndioklc.exe
- <Current directory>\pkqfweiitc.exe
- <Current directory>\zadoxjuhjd.exe
- <Current directory>\mskljogitr.exe
- <Current directory>\vixckksgbr.exe
- <Current directory>\ibfzwpwhkf.exe
- <Current directory>\vtmwimiquc.exe
- <Current directory>\fjzfjrupkc.exe
- <Current directory>\pzmxcnofac.exe
- <Current directory>\sudvaqoant.exe
- <Current directory>\vpmuqtxdir.exe
- <Current directory>\ffzmjxrtqs.exe
- <Current directory>\ovmdktdsgs.exe
- <Current directory>\rqdcawmntq.exe
- nul
- <Current directory>\ywogjafahd.exe
- <Current directory>\hebxkwzrxd.exe
- <Current directory>\scvqjdkjbg.exe
- <Current directory>\juqzqhqklf.exe
Deletes the following files
- <Current directory>\emwmoyxyps.exe
- <Current directory>\pkqfweiitc.exe
- <Current directory>\zadoxjuhjd.exe
- <Current directory>\mskljogitr.exe
- <Current directory>\vixckksgbr.exe
- <Current directory>\ibfzwpwhkf.exe
- <Current directory>\vtmwimiquc.exe
- <Current directory>\fjzfjrupkc.exe
- <Current directory>\pzmxcnofac.exe
- <Current directory>\sudvaqoant.exe
- <Current directory>\vpmuqtxdir.exe
- <Current directory>\ffzmjxrtqs.exe
- <Current directory>\ovmdktdsgs.exe
- <Current directory>\rqdcawmntq.exe
- <Current directory>\ywogjafahd.exe
- <Current directory>\hebxkwzrxd.exe
- <Current directory>\scvqjdkjbg.exe
- <Current directory>\fclndioklc.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\emwmoyxyps.exe'
- '<Current directory>\fclndioklc.exe'
- '<Current directory>\pkqfweiitc.exe'
- '<Current directory>\zadoxjuhjd.exe'
- '<Current directory>\mskljogitr.exe'
- '<Current directory>\vixckksgbr.exe'
- '<Current directory>\ibfzwpwhkf.exe'
- '<Current directory>\vtmwimiquc.exe'
- '<Current directory>\scvqjdkjbg.exe'
- '<Current directory>\fjzfjrupkc.exe'
- '<Current directory>\sudvaqoant.exe'
- '<Current directory>\vpmuqtxdir.exe'
- '<Current directory>\ffzmjxrtqs.exe'
- '<Current directory>\ovmdktdsgs.exe'
- '<Current directory>\rqdcawmntq.exe'
- '<Current directory>\ywogjafahd.exe'
- '<Current directory>\hebxkwzrxd.exe'
- '<Current directory>\pzmxcnofac.exe'
- '<Current directory>\juqzqhqklf.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JUQZQHQKLF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SCVQJDKJBG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FCLNDIOKLC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PKQFWEIITC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZADOXJUHJD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MSKLJOGITR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VIXCKKSGBR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IBFZWPWHKF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VTMWIMIQUC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WTJCEBMJCR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FJZFJRUPKC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SUDVAQOANT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VPMUQTXDIR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FFZMJXRTQS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OVMDKTDSGS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RQDCAWMNTQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YWOGJAFAHD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HEBXKWZRXD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EMWMOYXYPS.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PZMXCNOFAC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TYSEHZDGPT.exe"
