Technical Information
Modifies file system
Creates the following files
- <Current directory>\esmqttwnez.exe
- <Current directory>\yutetpdhpv.exe
- nul
- <Current directory>\ybflnnmpwk.exe
- <Current directory>\ighpmnzlrx.exe
- <Current directory>\bawldjygdl.exe
- <Current directory>\vvdzvgfspz.exe
- <Current directory>\ppsvmkdmau.exe
- <Current directory>\pedbhinchk.exe
- <Current directory>\zjfgfiaykx.exe
- <Current directory>\flfflzujmw.exe
- <Current directory>\mnnwqypnov.exe
- <Current directory>\thmvoyjyqv.exe
Deletes the following files
- <Current directory>\esmqttwnez.exe
- <Current directory>\yutetpdhpv.exe
- <Current directory>\ybflnnmpwk.exe
- <Current directory>\ighpmnzlrx.exe
- <Current directory>\bawldjygdl.exe
- <Current directory>\vvdzvgfspz.exe
- <Current directory>\ppsvmkdmau.exe
- <Current directory>\pedbhinchk.exe
- <Current directory>\zjfgfiaykx.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\esmqttwnez.exe'
- '<Current directory>\yutetpdhpv.exe'
- '<Current directory>\ybflnnmpwk.exe'
- '<Current directory>\ighpmnzlrx.exe'
- '<Current directory>\bawldjygdl.exe'
- '<Current directory>\vvdzvgfspz.exe'
- '<Current directory>\ppsvmkdmau.exe'
- '<Current directory>\pedbhinchk.exe'
- '<Current directory>\zjfgfiaykx.exe'
- '<Current directory>\flfflzujmw.exe'
- '<Current directory>\mnnwqypnov.exe'
- '<Current directory>\thmvoyjyqv.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ESMQTTWNEZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YUTETPDHPV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YBFLNNMPWK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IGHPMNZLRX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BAWLDJYGDL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VVDZVGFSPZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PPSVMKDMAU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PEDBHINCHK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZJFGFIAYKX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FLFFLZUJMW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MNNWQYPNOV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\THMVOYJYQV.exe"
