Technical Information
Modifies file system
Creates the following files
- <Current directory>\nzpzumgdnj.exe
- <Current directory>\fkgknmcrmv.exe
- <Current directory>\patugqwhcw.exe
- <Current directory>\svkbwtxkpu.exe
- <Current directory>\odehiuvkpj.exe
- <Current directory>\ytsykzoaxj.exe
- <Current directory>\llzvvwtjgx.exe
- <Current directory>\vbemwamiwy.exe
- <Current directory>\vcbtlpqtev.exe
- <Current directory>\iutbixrjgu.exe
- <Current directory>\inivgzhtzw.exe
- <Current directory>\evcjsbfarl.exe
- <Current directory>\lannbeygfx.exe
- nul
- <Current directory>\hjibogwffu.exe
- <Current directory>\ubpyzdappi.exe
- <Current directory>\xwgxpgjkjh.exe
- <Current directory>\rkytbcchou.exe
- <Current directory>\mmocklxcov.exe
Deletes the following files
- <Current directory>\nzpzumgdnj.exe
- <Current directory>\xwgxpgjkjh.exe
- <Current directory>\hjibogwffu.exe
- <Current directory>\ubpyzdappi.exe
- <Current directory>\lannbeygfx.exe
- <Current directory>\evcjsbfarl.exe
- <Current directory>\rkytbcchou.exe
- <Current directory>\inivgzhtzw.exe
- <Current directory>\vbemwamiwy.exe
- <Current directory>\iutbixrjgu.exe
- <Current directory>\llzvvwtjgx.exe
- <Current directory>\ytsykzoaxj.exe
- <Current directory>\odehiuvkpj.exe
- <Current directory>\svkbwtxkpu.exe
- <Current directory>\patugqwhcw.exe
- <Current directory>\fkgknmcrmv.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\nzpzumgdnj.exe'
- '<Current directory>\fkgknmcrmv.exe'
- '<Current directory>\patugqwhcw.exe'
- '<Current directory>\svkbwtxkpu.exe'
- '<Current directory>\odehiuvkpj.exe'
- '<Current directory>\ytsykzoaxj.exe'
- '<Current directory>\llzvvwtjgx.exe'
- '<Current directory>\vbemwamiwy.exe'
- '<Current directory>\iutbixrjgu.exe'
- '<Current directory>\rkytbcchou.exe'
- '<Current directory>\inivgzhtzw.exe'
- '<Current directory>\evcjsbfarl.exe'
- '<Current directory>\lannbeygfx.exe'
- '<Current directory>\hjibogwffu.exe'
- '<Current directory>\ubpyzdappi.exe'
- '<Current directory>\xwgxpgjkjh.exe'
- '<Current directory>\vcbtlpqtev.exe'
- '<Current directory>\mmocklxcov.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TCKONGSLDH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZIVAWKMRST.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JYIJXGFPIU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SONBQKRFQU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FGDXKPDPZI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MMOCKLXCOV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VCBTLPQTEV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FKGKNMCRMV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PATUGQWHCW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SVKBWTXKPU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ODEHIUVKPJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PHTPXDKQQI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YTSYKZOAXJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VBEMWAMIWY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IUTBIXRJGU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RKYTBCCHOU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\INIVGZHTZW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EVCJSBFARL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LANNBEYGFX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HJIBOGWFFU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UBPYZDAPPI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XWGXPGJKJH.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NZPZUMGDNJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LLZVVWTJGX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MTOXCYSDCH.exe"
