Technical Information
Modifies file system
Creates the following files
- <Current directory>\lnricsvtzg.exe
- <Current directory>\qqxiyxviio.exe
- <Current directory>\nyswlythad.exe
- <Current directory>\tedaucnvwp.exe
- <Current directory>\twzuredfqs.exe
- <Current directory>\thonxgupjd.exe
- <Current directory>\cxbfykford.exe
- <Current directory>\cqqyvnwykf.exe
- <Current directory>\thdcmvyijs.exe
- <Current directory>\pixvhkahuc.exe
- <Current directory>\pbuommqrne.exe
- <Current directory>\ctblyjcaxt.exe
- <Current directory>\izmpgnwglf.exe
- nul
- <Current directory>\vrtmssipvt.exe
- <Current directory>\mudowpfjgd.exe
- <Current directory>\yuklinjkqs.exe
- <Current directory>\zykeiouxkc.exe
- <Current directory>\txoiothypp.exe
Deletes the following files
- <Current directory>\lnricsvtzg.exe
- <Current directory>\thdcmvyijs.exe
- <Current directory>\nyswlythad.exe
- <Current directory>\tedaucnvwp.exe
- <Current directory>\twzuredfqs.exe
- <Current directory>\thonxgupjd.exe
- <Current directory>\cxbfykford.exe
- <Current directory>\cqqyvnwykf.exe
- <Current directory>\pixvhkahuc.exe
- <Current directory>\zykeiouxkc.exe
- <Current directory>\pbuommqrne.exe
- <Current directory>\ctblyjcaxt.exe
- <Current directory>\izmpgnwglf.exe
- <Current directory>\vrtmssipvt.exe
- <Current directory>\mudowpfjgd.exe
- <Current directory>\yuklinjkqs.exe
- <Current directory>\qqxiyxviio.exe
- <Current directory>\txoiothypp.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\lnricsvtzg.exe'
- '<Current directory>\qqxiyxviio.exe'
- '<Current directory>\nyswlythad.exe'
- '<Current directory>\tedaucnvwp.exe'
- '<Current directory>\twzuredfqs.exe'
- '<Current directory>\thonxgupjd.exe'
- '<Current directory>\cxbfykford.exe'
- '<Current directory>\cqqyvnwykf.exe'
- '<Current directory>\pixvhkahuc.exe'
- '<Current directory>\zykeiouxkc.exe'
- '<Current directory>\pbuommqrne.exe'
- '<Current directory>\ctblyjcaxt.exe'
- '<Current directory>\izmpgnwglf.exe'
- '<Current directory>\vrtmssipvt.exe'
- '<Current directory>\mudowpfjgd.exe'
- '<Current directory>\yuklinjkqs.exe'
- '<Current directory>\thdcmvyijs.exe'
- '<Current directory>\txoiothypp.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QQXIYXVIIO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NYSWLYTHAD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TEDAUCNVWP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TWZUREDFQS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\THONXGUPJD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CXBFYKFORD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CQQYVNWYKF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PIXVHKAHUC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZYKEIOUXKC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PBUOMMQRNE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CTBLYJCAXT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IZMPGNWGLF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VRTMSSIPVT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MUDOWPFJGD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YUKLINJKQS.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LNRICSVTZG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\THDCMVYIJS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TXOIOTHYPP.exe"
