Technical Information
Modifies file system
Creates the following files
- <Current directory>\twvwlrwoyf.exe
- <Current directory>\etxpsyiycp.exe
- <Current directory>\hpooibibxo.exe
- <Current directory>\rftgbxcsfo.exe
- <Current directory>\xkmkkbdfua.exe
- <Current directory>\xdadpdmpnd.exe
- <Current directory>\ayrcfgvkib.exe
- <Current directory>\bygruvzdpr.exe
- <Current directory>\hecgokwywo.exe
- <Current directory>\qeermiyhgr.exe
- <Current directory>\uzvqclzbtp.exe
- <Current directory>\tsjjinpmma.exe
- <Current directory>\tlgdfpgefc.exe
- nul
- <Current directory>\johfjncqqe.exe
- <Current directory>\hozalmeiqq.exe
- <Current directory>\vtvemrfybm.exe
Deletes the following files
- <Current directory>\twvwlrwoyf.exe
- <Current directory>\johfjncqqe.exe
- <Current directory>\tlgdfpgefc.exe
- <Current directory>\uzvqclzbtp.exe
- <Current directory>\tsjjinpmma.exe
- <Current directory>\qeermiyhgr.exe
- <Current directory>\hozalmeiqq.exe
- <Current directory>\hecgokwywo.exe
- <Current directory>\ayrcfgvkib.exe
- <Current directory>\xdadpdmpnd.exe
- <Current directory>\xkmkkbdfua.exe
- <Current directory>\rftgbxcsfo.exe
- <Current directory>\hpooibibxo.exe
- <Current directory>\etxpsyiycp.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\twvwlrwoyf.exe'
- '<Current directory>\johfjncqqe.exe'
- '<Current directory>\tlgdfpgefc.exe'
- '<Current directory>\tsjjinpmma.exe'
- '<Current directory>\uzvqclzbtp.exe'
- '<Current directory>\qeermiyhgr.exe'
- '<Current directory>\hozalmeiqq.exe'
- '<Current directory>\hecgokwywo.exe'
- '<Current directory>\ayrcfgvkib.exe'
- '<Current directory>\xdadpdmpnd.exe'
- '<Current directory>\xkmkkbdfua.exe'
- '<Current directory>\rftgbxcsfo.exe'
- '<Current directory>\hpooibibxo.exe'
- '<Current directory>\etxpsyiycp.exe'
- '<Current directory>\bygruvzdpr.exe'
- '<Current directory>\vtvemrfybm.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BYGRUVZDPR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ETXPSYIYCP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HPOOIBIBXO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RFTGBXCSFO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XKMKKBDFUA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XDADPDMPND.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AYRCFGVKIB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VTVEMRFYBM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HECGOKWYWO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QEERMIYHGR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UZVQCLZBTP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TSJJINPMMA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TLGDFPGEFC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JOHFJNCQQE.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TWVWLRWOYF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HOZALMEIQQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LDIVTVMZLE.exe"
