Technical Information
Modifies file system
Creates the following files
- <Current directory>\ozmfpdkboy.exe
- <Current directory>\phbownkvki.exe
- <Current directory>\zpoyxjwlsi.exe
- <Current directory>\csfxnmfonh.exe
- <Current directory>\lasooqrfvh.exe
- <Current directory>\pdbnetziqy.exe
- <Current directory>\cvqkqqejau.exe
- <Current directory>\ooxgbnqsji.exe
- <Current directory>\bofdvtubtx.exe
- <Current directory>\ogmahqgcdl.exe
- <Current directory>\vmxeptzqrx.exe
- <Current directory>\bsqqyxbvfk.exe
- <Current directory>\okxnjufepy.exe
- <Current directory>\lsstwvdehu.exe
- <Current directory>\uixkpapcxv.exe
- <Current directory>\eqkcreitfv.exe
- nul
- <Current directory>\bzeidfgsfk.exe
- <Current directory>\frwxciqxui.exe
- <Current directory>\wjjfbefgmh.exe
Deletes the following files
- <Current directory>\ozmfpdkboy.exe
- <Current directory>\zpoyxjwlsi.exe
- <Current directory>\phbownkvki.exe
- <Current directory>\csfxnmfonh.exe
- <Current directory>\lasooqrfvh.exe
- <Current directory>\pdbnetziqy.exe
- <Current directory>\cvqkqqejau.exe
- <Current directory>\ooxgbnqsji.exe
- <Current directory>\frwxciqxui.exe
- <Current directory>\bofdvtubtx.exe
- <Current directory>\vmxeptzqrx.exe
- <Current directory>\bsqqyxbvfk.exe
- <Current directory>\okxnjufepy.exe
- <Current directory>\lsstwvdehu.exe
- <Current directory>\uixkpapcxv.exe
- <Current directory>\eqkcreitfv.exe
- <Current directory>\bzeidfgsfk.exe
- <Current directory>\ogmahqgcdl.exe
- <Current directory>\wjjfbefgmh.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\ozmfpdkboy.exe'
- '<Current directory>\phbownkvki.exe'
- '<Current directory>\zpoyxjwlsi.exe'
- '<Current directory>\csfxnmfonh.exe'
- '<Current directory>\lasooqrfvh.exe'
- '<Current directory>\pdbnetziqy.exe'
- '<Current directory>\cvqkqqejau.exe'
- '<Current directory>\ooxgbnqsji.exe'
- '<Current directory>\frwxciqxui.exe'
- '<Current directory>\bofdvtubtx.exe'
- '<Current directory>\vmxeptzqrx.exe'
- '<Current directory>\bsqqyxbvfk.exe'
- '<Current directory>\okxnjufepy.exe'
- '<Current directory>\lsstwvdehu.exe'
- '<Current directory>\uixkpapcxv.exe'
- '<Current directory>\eqkcreitfv.exe'
- '<Current directory>\bzeidfgsfk.exe'
- '<Current directory>\ogmahqgcdl.exe'
- '<Current directory>\wjjfbefgmh.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FRWXCIQXUI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WJJFBEFGMH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZAOZODHHML.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MAHDDGDYDX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZIZGRBQOTI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MPKJFDMNJU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MWWQABWVQJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WXMHVXCXZK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZEOTOWSUHV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JBFRKYNAVL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WBXUYBJRMX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NTKDXXPBEW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WQJBTZSHSU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JQTEHUOYJY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PHBOWNKVKI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZPDMMYAEAY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZPOYXJWLSI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OKXNJUFEPY.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OZMFPDKBOY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BZEIDFGSFK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EQKCREITFV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UIXKPAPCXV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LSSTWVDEHU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BSQQYXBVFK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LASOOQRFVH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VMXEPTZQRX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OGMAHQGCDL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BOFDVTUBTX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OOXGBNQSJI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CVQKQQEJAU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PDBNETZIQY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CSFXNMFONH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NPHQUTQYRJ.exe"
