Technical Information
Modifies file system
Creates the following files
- <Current directory>\hzznzhiqxi.exe
- <Current directory>\kreznfsrxu.exe
- nul
- <Current directory>\hdzgratmrt.exe
- <Current directory>\ycxdtcrdii.exe
- <Current directory>\sxmrkypqtv.exe
- <Current directory>\ihziruezlv.exe
- <Current directory>\fmibbrvwqf.exe
- <Current directory>\ftuqwxemxu.exe
- <Current directory>\sbmtksadng.exe
- <Current directory>\pxwuupriah.exe
- <Current directory>\vavlaomtch.exe
- <Current directory>\pukhrktggu.exe
- <Current directory>\ccdkxngewg.exe
Deletes the following files
- <Current directory>\hzznzhiqxi.exe
- <Current directory>\kreznfsrxu.exe
- <Current directory>\hdzgratmrt.exe
- <Current directory>\ycxdtcrdii.exe
- <Current directory>\sxmrkypqtv.exe
- <Current directory>\ihziruezlv.exe
- <Current directory>\fmibbrvwqf.exe
- <Current directory>\ftuqwxemxu.exe
- <Current directory>\sbmtksadng.exe
- <Current directory>\vavlaomtch.exe
- <Current directory>\pukhrktggu.exe
- <Current directory>\pxwuupriah.exe
- <Current directory>\ccdkxngewg.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\hzznzhiqxi.exe'
- '<Current directory>\kreznfsrxu.exe'
- '<Current directory>\hdzgratmrt.exe'
- '<Current directory>\ycxdtcrdii.exe'
- '<Current directory>\sxmrkypqtv.exe'
- '<Current directory>\ihziruezlv.exe'
- '<Current directory>\fmibbrvwqf.exe'
- '<Current directory>\ftuqwxemxu.exe'
- '<Current directory>\sbmtksadng.exe'
- '<Current directory>\pxwuupriah.exe'
- '<Current directory>\vavlaomtch.exe'
- '<Current directory>\pukhrktggu.exe'
- '<Current directory>\ccdkxngewg.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CCDKXNGEWG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PUKHRKTGGU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VAVLAOMTCH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PXWUUPRIAH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SBMTKSADNG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FTUQWXEMXU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SMQTEJVGOG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FMIBBRVWQF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SXMRKYPQTV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YCXDTCRDII.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HDZGRATMRT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KREZNFSRXU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HZZNZHIQXI.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IHZIRUEZLV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PQZUOGMLTH.exe"
