Technical Information
Modifies file system
Creates the following files
- <Current directory>\hhsbfupukb.exe
- <Current directory>\mzbiexhzaz.exe
- <Current directory>\zsiequlajn.exe
- <Current directory>\ycfyvwcsdq.exe
- <Current directory>\fiqkwzvyrc.exe
- <Current directory>\ilhjucebmb.exe
- <Current directory>\stusnhyrub.exe
- <Current directory>\lzmbhhvgsc.exe
- <Current directory>\cjwydsoasz.exe
- <Current directory>\rfxfqdxtgo.exe
- <Current directory>\eqbvhkrnrn.exe
- <Current directory>\oyonihldzn.exe
- <Current directory>\yotwblxbpn.exe
- <Current directory>\xyqqhnnmjq.exe
- nul
- <Current directory>\hovharzkrq.exe
- <Current directory>\uhketpllan.exe
- <Current directory>\ykqjyhyzva.exe
- <Current directory>\stjhkwckcy.exe
Deletes the following files
- <Current directory>\hhsbfupukb.exe
- <Current directory>\uhketpllan.exe
- <Current directory>\hovharzkrq.exe
- <Current directory>\xyqqhnnmjq.exe
- <Current directory>\yotwblxbpn.exe
- <Current directory>\oyonihldzn.exe
- <Current directory>\eqbvhkrnrn.exe
- <Current directory>\rfxfqdxtgo.exe
- <Current directory>\ykqjyhyzva.exe
- <Current directory>\lzmbhhvgsc.exe
- <Current directory>\ilhjucebmb.exe
- <Current directory>\stusnhyrub.exe
- <Current directory>\fiqkwzvyrc.exe
- <Current directory>\ycfyvwcsdq.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\hhsbfupukb.exe'
- '<Current directory>\mzbiexhzaz.exe'
- '<Current directory>\zsiequlajn.exe'
- '<Current directory>\ycfyvwcsdq.exe'
- '<Current directory>\fiqkwzvyrc.exe'
- '<Current directory>\ilhjucebmb.exe'
- '<Current directory>\stusnhyrub.exe'
- '<Current directory>\lzmbhhvgsc.exe'
- '<Current directory>\rfxfqdxtgo.exe'
- '<Current directory>\ykqjyhyzva.exe'
- '<Current directory>\eqbvhkrnrn.exe'
- '<Current directory>\oyonihldzn.exe'
- '<Current directory>\yotwblxbpn.exe'
- '<Current directory>\xyqqhnnmjq.exe'
- '<Current directory>\hovharzkrq.exe'
- '<Current directory>\uhketpllan.exe'
- '<Current directory>\cjwydsoasz.exe'
- '<Current directory>\stjhkwckcy.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MZBIEXHZAZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZSIEQULAJN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YCFYVWCSDQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FIQKWZVYRC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ILHJUCEBMB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\STUSNHYRUB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LZMBHHVGSC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RFXFQDXTGO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YKQJYHYZVA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EQBVHKRNRN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OYONIHLDZN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YOTWBLXBPN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XYQQHNNMJQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HOVHARZKRQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UHKETPLLAN.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HHSBFUPUKB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CJWYDSOASZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\STJHKWCKCY.exe"
