Technical Information
Modifies file system
Creates the following files
- <Current directory>\vboypoolmp.exe
- <Current directory>\pwgpsxdjfp.exe
- <Current directory>\wcrubswptb.exe
- <Current directory>\gsfluxqnjc.exe
- <Current directory>\mxqxcajtyo.exe
- <Current directory>\cazzhyonby.exe
- <Current directory>\jgkdpchspd.exe
- <Current directory>\soxvqybrfd.exe
- <Current directory>\ztizrcuwup.exe
- <Current directory>\ppgubchbqc.exe
- <Current directory>\skxtrfqdlb.exe
- <Current directory>\fkeqckufvp.exe
- <Current directory>\sdmnwhhofd.exe
- <Current directory>\fvbjimlxoz.exe
- <Current directory>\lbmwqhmcdm.exe
- <Current directory>\vrzfjmybtm.exe
- nul
- <Current directory>\ijgcdrkcca.exe
- <Current directory>\gotyrsjlxp.exe
- <Current directory>\tombfvfcna.exe
Deletes the following files
- <Current directory>\vboypoolmp.exe
- <Current directory>\pwgpsxdjfp.exe
- <Current directory>\wcrubswptb.exe
- <Current directory>\gsfluxqnjc.exe
- <Current directory>\mxqxcajtyo.exe
- <Current directory>\cazzhyonby.exe
- <Current directory>\jgkdpchspd.exe
- <Current directory>\soxvqybrfd.exe
- <Current directory>\gotyrsjlxp.exe
- <Current directory>\ztizrcuwup.exe
- <Current directory>\skxtrfqdlb.exe
- <Current directory>\fkeqckufvp.exe
- <Current directory>\sdmnwhhofd.exe
- <Current directory>\fvbjimlxoz.exe
- <Current directory>\vrzfjmybtm.exe
- <Current directory>\lbmwqhmcdm.exe
- <Current directory>\ijgcdrkcca.exe
- <Current directory>\ppgubchbqc.exe
- <Current directory>\tombfvfcna.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\vboypoolmp.exe'
- '<Current directory>\pwgpsxdjfp.exe'
- '<Current directory>\wcrubswptb.exe'
- '<Current directory>\gsfluxqnjc.exe'
- '<Current directory>\mxqxcajtyo.exe'
- '<Current directory>\cazzhyonby.exe'
- '<Current directory>\jgkdpchspd.exe'
- '<Current directory>\soxvqybrfd.exe'
- '<Current directory>\gotyrsjlxp.exe'
- '<Current directory>\ztizrcuwup.exe'
- '<Current directory>\skxtrfqdlb.exe'
- '<Current directory>\fkeqckufvp.exe'
- '<Current directory>\sdmnwhhofd.exe'
- '<Current directory>\fvbjimlxoz.exe'
- '<Current directory>\lbmwqhmcdm.exe'
- '<Current directory>\vrzfjmybtm.exe'
- '<Current directory>\ijgcdrkcca.exe'
- '<Current directory>\ppgubchbqc.exe'
- '<Current directory>\tombfvfcna.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TDXQATPSUQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TOMBFVFCNA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GOTYRSJLXP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PWGPSXDJFP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WCRUBSWPTB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GSFLUXQNJC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MXQXCAJTYO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CAZZHYONBY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JGKDPCHSPD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SOXVQYBRFD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZTIZRCUWUP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PPGUBCHBQC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SKXTRFQDLB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FKEQCKUFVP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SDMNWHHOFD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FVBJIMLXOZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LBMWQHMCDM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VRZFJMYBTM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IJGCDRKCCA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VBOYPOOLMP.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WVDCVSRSUB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JVWFBNMJKN.exe"
