Technical Information
Modifies file system
Creates the following files
- <Current directory>\allevhlghn.exe
- <Current directory>\fdctukwlxl.exe
- <Current directory>\plhlnppjfl.exe
- <Current directory>\cmohhmukoa.exe
- <Current directory>\peeetrgtyo.exe
- <Current directory>\yujounrkow.exe
- <Current directory>\lmykfswtyk.exe
- <Current directory>\ssjwooxymx.exe
- <Current directory>\rdyilqnrfz.exe
- <Current directory>\zyjplhcfiz.exe
- <Current directory>\edffxvsspo.exe
- <Current directory>\ybfozwxonw.exe
- <Current directory>\ehqsizyucb.exe
- <Current directory>\oxejbwkskb.exe
- <Current directory>\ohsdgyadlm.exe
- <Current directory>\xxfmzcmttm.exe
- <Current directory>\hnsdbhgrjm.exe
- nul
- <Current directory>\rvyvudsirn.exe
- <Current directory>\ljyrgztfea.exe
- <Current directory>\mxcsakqwzk.exe
Deletes the following files
- <Current directory>\allevhlghn.exe
- <Current directory>\peeetrgtyo.exe
- <Current directory>\cmohhmukoa.exe
- <Current directory>\yujounrkow.exe
- <Current directory>\lmykfswtyk.exe
- <Current directory>\ssjwooxymx.exe
- <Current directory>\rdyilqnrfz.exe
- <Current directory>\edffxvsspo.exe
- <Current directory>\ljyrgztfea.exe
- <Current directory>\ybfozwxonw.exe
- <Current directory>\ehqsizyucb.exe
- <Current directory>\oxejbwkskb.exe
- <Current directory>\ohsdgyadlm.exe
- <Current directory>\xxfmzcmttm.exe
- <Current directory>\hnsdbhgrjm.exe
- <Current directory>\rvyvudsirn.exe
- <Current directory>\fdctukwlxl.exe
- <Current directory>\plhlnppjfl.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\allevhlghn.exe'
- '<Current directory>\fdctukwlxl.exe'
- '<Current directory>\plhlnppjfl.exe'
- '<Current directory>\cmohhmukoa.exe'
- '<Current directory>\peeetrgtyo.exe'
- '<Current directory>\yujounrkow.exe'
- '<Current directory>\lmykfswtyk.exe'
- '<Current directory>\ssjwooxymx.exe'
- '<Current directory>\rdyilqnrfz.exe'
- '<Current directory>\edffxvsspo.exe'
- '<Current directory>\ljyrgztfea.exe'
- '<Current directory>\ybfozwxonw.exe'
- '<Current directory>\ehqsizyucb.exe'
- '<Current directory>\oxejbwkskb.exe'
- '<Current directory>\ohsdgyadlm.exe'
- '<Current directory>\xxfmzcmttm.exe'
- '<Current directory>\hnsdbhgrjm.exe'
- '<Current directory>\rvyvudsirn.exe'
- '<Current directory>\zyjplhcfiz.exe'
- '<Current directory>\mxcsakqwzk.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZYJPLHCFIZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FDCTUKWLXL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PLHLNPPJFL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CMOHHMUKOA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PEEETRGTYO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YUJOUNRKOW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LMYKFSWTYK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SSJWOOXYMX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RDYILQNRFZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MXCSAKQWZK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EDFFXVSSPO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YBFOZWXONW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EHQSIZYUCB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OXEJBWKSKB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OHSDGYADLM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XXFMZCMTTM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HNSDBHGRJM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RVYVUDSIRN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ALLEVHLGHN.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LJYRGZTFEA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FSRGRGXIKY.exe"
