Technical Information
Modifies file system
Creates the following files
- <Current directory>\crujmuwqfv.exe
- <Current directory>\appgiddzaj.exe
- <Current directory>\dsxfygeuvi.exe
- <Current directory>\dduydivmok.exe
- <Current directory>\nthpwfocel.exe
- <Current directory>\qoqouipxrj.exe
- <Current directory>\trhnklyami.exe
- <Current directory>\juqppivupk.exe
- <Current directory>\nphoelepki.exe
- <Current directory>\wxmfgqpnsj.exe
- <Current directory>\qdmgaqvcqj.exe
- <Current directory>\dvudmnhdax.exe
- nul
- <Current directory>\wtmmgwmsyy.exe
- <Current directory>\jtbbstrbhu.exe
- <Current directory>\tbhstxczxv.exe
- <Current directory>\kmfedyzfxh.exe
- <Current directory>\aesmkbnphh.exe
Deletes the following files
- <Current directory>\crujmuwqfv.exe
- <Current directory>\tbhstxczxv.exe
- <Current directory>\wtmmgwmsyy.exe
- <Current directory>\jtbbstrbhu.exe
- <Current directory>\dvudmnhdax.exe
- <Current directory>\qdmgaqvcqj.exe
- <Current directory>\wxmfgqpnsj.exe
- <Current directory>\juqppivupk.exe
- <Current directory>\nphoelepki.exe
- <Current directory>\trhnklyami.exe
- <Current directory>\qoqouipxrj.exe
- <Current directory>\nthpwfocel.exe
- <Current directory>\dduydivmok.exe
- <Current directory>\dsxfygeuvi.exe
- <Current directory>\appgiddzaj.exe
- <Current directory>\kmfedyzfxh.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\crujmuwqfv.exe'
- '<Current directory>\appgiddzaj.exe'
- '<Current directory>\dsxfygeuvi.exe'
- '<Current directory>\dduydivmok.exe'
- '<Current directory>\nthpwfocel.exe'
- '<Current directory>\qoqouipxrj.exe'
- '<Current directory>\trhnklyami.exe'
- '<Current directory>\kmfedyzfxh.exe'
- '<Current directory>\juqppivupk.exe'
- '<Current directory>\wxmfgqpnsj.exe'
- '<Current directory>\qdmgaqvcqj.exe'
- '<Current directory>\dvudmnhdax.exe'
- '<Current directory>\wtmmgwmsyy.exe'
- '<Current directory>\jtbbstrbhu.exe'
- '<Current directory>\tbhstxczxv.exe'
- '<Current directory>\nphoelepki.exe'
- '<Current directory>\aesmkbnphh.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AESMKBNPHH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KMFEDYZFXH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\APPGIDDZAJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DSXFYGEUVI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DDUYDIVMOK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NTHPWFOCEL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QOQOUIPXRJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TRHNKLYAMI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UYHICYMBSU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JUQPPIVUPK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WXMFGQPNSJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QDMGAQVCQJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DVUDMNHDAX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WTMMGWMSYY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JTBBSTRBHU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TBHSTXCZXV.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CRUJMUWQFV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NPHOELEPKI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KIURBBALKU.exe"
