Technical Information
Modifies file system
Creates the following files
- <Current directory>\uhxtbqyjmp.exe
- <Current directory>\yaoiatqobf.exe
- <Current directory>\iqbrbqbmsg.exe
- <Current directory>\ysdbgwgyvq.exe
- <Current directory>\llkqrtkhee.exe
- <Current directory>\ydzndypqos.exe
- <Current directory>\ogbxhwtczd.exe
- <Current directory>\byitbbxljr.exe
- <Current directory>\lovduxrbrr.exe
- <Current directory>\uejuvbdahs.exe
- <Current directory>\hxqrhyhjrg.exe
- <Current directory>\upxotetkac.exe
- <Current directory>\hpekmbxtkq.exe
- <Current directory>\rxsugfrjsr.exe
- <Current directory>\bnflhbdiir.exe
- <Current directory>\ngmisgprsf.exe
- <Current directory>\xwzzulbhag.exe
- <Current directory>\hmmjnhvgqg.exe
- nul
- <Current directory>\quraolgwyg.exe
- <Current directory>\akfshisuop.exe
- <Current directory>\kzsbimmlwp.exe
- <Current directory>\lhhlpomfsr.exe
- <Current directory>\yhaodrzdid.exe
Deletes the following files
- <Current directory>\uhxtbqyjmp.exe
- <Current directory>\ysdbgwgyvq.exe
- <Current directory>\llkqrtkhee.exe
- <Current directory>\ydzndypqos.exe
- <Current directory>\ogbxhwtczd.exe
- <Current directory>\byitbbxljr.exe
- <Current directory>\lovduxrbrr.exe
- <Current directory>\uejuvbdahs.exe
- <Current directory>\hxqrhyhjrg.exe
- <Current directory>\iqbrbqbmsg.exe
- <Current directory>\upxotetkac.exe
- <Current directory>\rxsugfrjsr.exe
- <Current directory>\bnflhbdiir.exe
- <Current directory>\ngmisgprsf.exe
- <Current directory>\xwzzulbhag.exe
- <Current directory>\hmmjnhvgqg.exe
- <Current directory>\quraolgwyg.exe
- <Current directory>\akfshisuop.exe
- <Current directory>\kzsbimmlwp.exe
- <Current directory>\hpekmbxtkq.exe
- <Current directory>\yaoiatqobf.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\uhxtbqyjmp.exe'
- '<Current directory>\yaoiatqobf.exe'
- '<Current directory>\iqbrbqbmsg.exe'
- '<Current directory>\ysdbgwgyvq.exe'
- '<Current directory>\llkqrtkhee.exe'
- '<Current directory>\ydzndypqos.exe'
- '<Current directory>\ogbxhwtczd.exe'
- '<Current directory>\byitbbxljr.exe'
- '<Current directory>\lovduxrbrr.exe'
- '<Current directory>\uejuvbdahs.exe'
- '<Current directory>\lhhlpomfsr.exe'
- '<Current directory>\hxqrhyhjrg.exe'
- '<Current directory>\hpekmbxtkq.exe'
- '<Current directory>\rxsugfrjsr.exe'
- '<Current directory>\bnflhbdiir.exe'
- '<Current directory>\ngmisgprsf.exe'
- '<Current directory>\xwzzulbhag.exe'
- '<Current directory>\hmmjnhvgqg.exe'
- '<Current directory>\quraolgwyg.exe'
- '<Current directory>\akfshisuop.exe'
- '<Current directory>\kzsbimmlwp.exe'
- '<Current directory>\upxotetkac.exe'
- '<Current directory>\yhaodrzdid.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LHHLPOMFSR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YAOIATQOBF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IQBRBQBMSG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YSDBGWGYVQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LLKQRTKHEE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YDZNDYPQOS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OGBXHWTCZD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BYITBBXLJR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LOVDUXRBRR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UEJUVBDAHS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HXQRHYHJRG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UPXOTETKAC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HPEKMBXTKQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RXSUGFRJSR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BNFLHBDIIR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NGMISGPRSF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XWZZULBHAG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HMMJNHVGQG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QURAOLGWYG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AKFSHISUOP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KZSBIMMLWP.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UHXTBQYJMP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YHAODRZDID.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LPKRRMVUZO.exe"
