Technical Information
Modifies file system
Creates the following files
- <Current directory>\vykybdiggz.exe
- <Current directory>\twxupfqhin.exe
- <Current directory>\wrotniqkvm.exe
- <Current directory>\ghbcgmkblm.exe
- <Current directory>\tzizrjokva.exe
- <Current directory>\zftlanqqjn.exe
- <Current directory>\dikkyqzswl.exe
- <Current directory>\jnvozlsyky.exe
- <Current directory>\mimvxobbfo.exe
- <Current directory>\pedunrcwsn.exe
- <Current directory>\zuqdgvvmin.exe
- <Current directory>\cphceyepvm.exe
- <Current directory>\mfmuxvqglm.exe
- <Current directory>\ingikwonda.exe
- nul
- <Current directory>\vfoevbsomp.exe
- <Current directory>\qaovzchnnx.exe
- <Current directory>\gkbeggvofx.exe
Deletes the following files
- <Current directory>\vykybdiggz.exe
- <Current directory>\vfoevbsomp.exe
- <Current directory>\ingikwonda.exe
- <Current directory>\mfmuxvqglm.exe
- <Current directory>\cphceyepvm.exe
- <Current directory>\zuqdgvvmin.exe
- <Current directory>\pedunrcwsn.exe
- <Current directory>\mimvxobbfo.exe
- <Current directory>\jnvozlsyky.exe
- <Current directory>\dikkyqzswl.exe
- <Current directory>\zftlanqqjn.exe
- <Current directory>\tzizrjokva.exe
- <Current directory>\ghbcgmkblm.exe
- <Current directory>\twxupfqhin.exe
- <Current directory>\wrotniqkvm.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\vykybdiggz.exe'
- '<Current directory>\twxupfqhin.exe'
- '<Current directory>\wrotniqkvm.exe'
- '<Current directory>\ghbcgmkblm.exe'
- '<Current directory>\tzizrjokva.exe'
- '<Current directory>\zftlanqqjn.exe'
- '<Current directory>\dikkyqzswl.exe'
- '<Current directory>\qaovzchnnx.exe'
- '<Current directory>\jnvozlsyky.exe'
- '<Current directory>\pedunrcwsn.exe'
- '<Current directory>\zuqdgvvmin.exe'
- '<Current directory>\cphceyepvm.exe'
- '<Current directory>\mfmuxvqglm.exe'
- '<Current directory>\ingikwonda.exe'
- '<Current directory>\vfoevbsomp.exe'
- '<Current directory>\mimvxobbfo.exe'
- '<Current directory>\gkbeggvofx.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TWXUPFQHIN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WROTNIQKVM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GHBCGMKBLM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TZIZRJOKVA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZFTLANQQJN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DIKKYQZSWL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JNVOZLSYKY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QAOVZCHNNX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MIMVXOBBFO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZUQDGVVMIN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CPHCEYEPVM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MFMUXVQGLM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\INGIKWONDA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VFOEVBSOMP.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VYKYBDIGGZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PEDUNRCWSN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GKBEGGVOFX.exe"
