Technical Information
Modifies file system
Creates the following files
- <Current directory>\qrswcihrfx.exe
- <Current directory>\ymdrumkoob.exe
- <Current directory>\lekngropxx.exe
- <Current directory>\yfscroayhl.exe
- <Current directory>\ohbmwuxssn.exe
- <Current directory>\baijhrbtck.exe
- <Current directory>\osqgbwncmy.exe
- <Current directory>\vybkkrhiak.exe
- <Current directory>\hyqhvwtrkz.exe
- <Current directory>\rgvyoteisz.exe
- <Current directory>\eglniyrrbn.exe
- <Current directory>\ooqebccprn.exe
- <Current directory>\uubqkyevga.exe
- <Current directory>\huqfwdiepo.exe
- <Current directory>\unxcpamfzk.exe
- <Current directory>\hffybfyojz.exe
- <Current directory>\nlqlkbscxl.exe
- <Current directory>\uqjpsethmy.exe
- <Current directory>\dgogljfgcy.exe
- <Current directory>\nobymfywky.exe
- nul
- <Current directory>\drkarlvqva.exe
- <Current directory>\owqztpyqga.exe
- <Current directory>\ytgxpjtwuy.exe
Deletes the following files
- <Current directory>\qrswcihrfx.exe
- <Current directory>\ymdrumkoob.exe
- <Current directory>\lekngropxx.exe
- <Current directory>\yfscroayhl.exe
- <Current directory>\ohbmwuxssn.exe
- <Current directory>\baijhrbtck.exe
- <Current directory>\osqgbwncmy.exe
- <Current directory>\vybkkrhiak.exe
- <Current directory>\hyqhvwtrkz.exe
- <Current directory>\rgvyoteisz.exe
- <Current directory>\owqztpyqga.exe
- <Current directory>\eglniyrrbn.exe
- <Current directory>\uubqkyevga.exe
- <Current directory>\huqfwdiepo.exe
- <Current directory>\unxcpamfzk.exe
- <Current directory>\hffybfyojz.exe
- <Current directory>\nlqlkbscxl.exe
- <Current directory>\uqjpsethmy.exe
- <Current directory>\dgogljfgcy.exe
- <Current directory>\nobymfywky.exe
- <Current directory>\drkarlvqva.exe
- <Current directory>\ooqebccprn.exe
- <Current directory>\ytgxpjtwuy.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\qrswcihrfx.exe'
- '<Current directory>\ymdrumkoob.exe'
- '<Current directory>\lekngropxx.exe'
- '<Current directory>\yfscroayhl.exe'
- '<Current directory>\ohbmwuxssn.exe'
- '<Current directory>\baijhrbtck.exe'
- '<Current directory>\osqgbwncmy.exe'
- '<Current directory>\vybkkrhiak.exe'
- '<Current directory>\hyqhvwtrkz.exe'
- '<Current directory>\rgvyoteisz.exe'
- '<Current directory>\owqztpyqga.exe'
- '<Current directory>\eglniyrrbn.exe'
- '<Current directory>\uubqkyevga.exe'
- '<Current directory>\huqfwdiepo.exe'
- '<Current directory>\unxcpamfzk.exe'
- '<Current directory>\hffybfyojz.exe'
- '<Current directory>\nlqlkbscxl.exe'
- '<Current directory>\uqjpsethmy.exe'
- '<Current directory>\dgogljfgcy.exe'
- '<Current directory>\nobymfywky.exe'
- '<Current directory>\drkarlvqva.exe'
- '<Current directory>\ooqebccprn.exe'
- '<Current directory>\ytgxpjtwuy.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YTGXPJTWUY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OWQZTPYQGA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YMDRUMKOOB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LEKNGROPXX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YFSCROAYHL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OHBMWUXSSN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BAIJHRBTCK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OSQGBWNCMY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VYBKKRHIAK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HYQHVWTRKZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RGVYOTEISZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PLBGVNIGMY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EGLNIYRRBN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UUBQKYEVGA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HUQFWDIEPO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UNXCPAMFZK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HFFYBFYOJZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NLQLKBSCXL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UQJPSETHMY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DGOGLJFGCY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NOBYMFYWKY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DRKARLVQVA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QRSWCIHRFX.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OOQEBCCPRN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IGICNJGSYL.exe"
