Technical Information
Modifies file system
Creates the following files
- <Current directory>\evktiegdpl.exe
- <Current directory>\zqdkmnvcil.exe
- <Current directory>\lqkhxkzdsz.exe
- <Current directory>\vyyyzptbia.exe
- <Current directory>\iyfnkmxkrw.exe
- <Current directory>\sgsflqibzw.exe
- <Current directory>\szhyjszltz.exe
- <Current directory>\bhupkotjjz.exe
- <Current directory>\skkgdjtotz.exe
- <Current directory>\ypowxqrjao.exe
- <Current directory>\lakmoxlcdm.exe
- <Current directory>\rgvyoteisz.exe
- <Current directory>\eglniyrrbn.exe
- <Current directory>\kmwzrbkeqa.exe
- nul
- <Current directory>\ohmyhetzly.exe
- <Current directory>\xprpabfyby.exe
- <Current directory>\iftnquchqw.exe
- <Current directory>\fsdjsepnkk.exe
Deletes the following files
- <Current directory>\evktiegdpl.exe
- <Current directory>\zqdkmnvcil.exe
- <Current directory>\lqkhxkzdsz.exe
- <Current directory>\vyyyzptbia.exe
- <Current directory>\iyfnkmxkrw.exe
- <Current directory>\sgsflqibzw.exe
- <Current directory>\szhyjszltz.exe
- <Current directory>\bhupkotjjz.exe
- <Current directory>\ypowxqrjao.exe
- <Current directory>\iftnquchqw.exe
- <Current directory>\lakmoxlcdm.exe
- <Current directory>\rgvyoteisz.exe
- <Current directory>\eglniyrrbn.exe
- <Current directory>\kmwzrbkeqa.exe
- <Current directory>\ohmyhetzly.exe
- <Current directory>\xprpabfyby.exe
- <Current directory>\skkgdjtotz.exe
- <Current directory>\fsdjsepnkk.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\evktiegdpl.exe'
- '<Current directory>\zqdkmnvcil.exe'
- '<Current directory>\lqkhxkzdsz.exe'
- '<Current directory>\vyyyzptbia.exe'
- '<Current directory>\iyfnkmxkrw.exe'
- '<Current directory>\sgsflqibzw.exe'
- '<Current directory>\szhyjszltz.exe'
- '<Current directory>\bhupkotjjz.exe'
- '<Current directory>\ypowxqrjao.exe'
- '<Current directory>\iftnquchqw.exe'
- '<Current directory>\lakmoxlcdm.exe'
- '<Current directory>\rgvyoteisz.exe'
- '<Current directory>\eglniyrrbn.exe'
- '<Current directory>\kmwzrbkeqa.exe'
- '<Current directory>\ohmyhetzly.exe'
- '<Current directory>\xprpabfyby.exe'
- '<Current directory>\skkgdjtotz.exe'
- '<Current directory>\fsdjsepnkk.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SKKGDJTOTZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZQDKMNVCIL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LQKHXKZDSZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VYYYZPTBIA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IYFNKMXKRW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SGSFLQIBZW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SZHYJSZLTZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BHUPKOTJJZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FSDJSEPNKK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YPOWXQRJAO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LAKMOXLCDM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RGVYOTEISZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EGLNIYRRBN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KMWZRBKEQA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OHMYHETZLY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XPRPABFYBY.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EVKTIEGDPL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IFTNQUCHQW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SZWNGHDEAW.exe"
