Technical Information
Modifies file system
Creates the following files
- <Current directory>\pmikavttoq.exe
- <Current directory>\ufrrzylylo.exe
- <Current directory>\akkdhcfdas.exe
- <Current directory>\hqvhqggrof.exe
- <Current directory>\klmggipmbd.exe
- <Current directory>\kebzllxwuo.exe
- <Current directory>\tmorehruko.exe
- <Current directory>\gmvnymvvuc.exe
- <Current directory>\tedkkjhfer.exe
- <Current directory>\watjamizqp.exe
- <Current directory>\gqhsbqcyhp.exe
- <Current directory>\qfmkunowpq.exe
- <Current directory>\dybgosaxye.exe
- <Current directory>\jdmlontlnq.exe
- <Current directory>\tlzcpsnbdr.exe
- nul
- <Current directory>\zrkoyvgprd.exe
- <Current directory>\jhxyzsafze.exe
- <Current directory>\kpmhgcszvo.exe
- <Current directory>\ahzqeygjff.exe
Deletes the following files
- <Current directory>\pmikavttoq.exe
- <Current directory>\ufrrzylylo.exe
- <Current directory>\akkdhcfdas.exe
- <Current directory>\hqvhqggrof.exe
- <Current directory>\klmggipmbd.exe
- <Current directory>\kebzllxwuo.exe
- <Current directory>\tmorehruko.exe
- <Current directory>\gmvnymvvuc.exe
- <Current directory>\kpmhgcszvo.exe
- <Current directory>\tedkkjhfer.exe
- <Current directory>\gqhsbqcyhp.exe
- <Current directory>\qfmkunowpq.exe
- <Current directory>\dybgosaxye.exe
- <Current directory>\tlzcpsnbdr.exe
- <Current directory>\jdmlontlnq.exe
- <Current directory>\zrkoyvgprd.exe
- <Current directory>\jhxyzsafze.exe
- <Current directory>\watjamizqp.exe
- <Current directory>\ahzqeygjff.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\pmikavttoq.exe'
- '<Current directory>\ufrrzylylo.exe'
- '<Current directory>\akkdhcfdas.exe'
- '<Current directory>\hqvhqggrof.exe'
- '<Current directory>\klmggipmbd.exe'
- '<Current directory>\kebzllxwuo.exe'
- '<Current directory>\tmorehruko.exe'
- '<Current directory>\gmvnymvvuc.exe'
- '<Current directory>\kpmhgcszvo.exe'
- '<Current directory>\tedkkjhfer.exe'
- '<Current directory>\gqhsbqcyhp.exe'
- '<Current directory>\qfmkunowpq.exe'
- '<Current directory>\dybgosaxye.exe'
- '<Current directory>\jdmlontlnq.exe'
- '<Current directory>\tlzcpsnbdr.exe'
- '<Current directory>\zrkoyvgprd.exe'
- '<Current directory>\jhxyzsafze.exe'
- '<Current directory>\watjamizqp.exe'
- '<Current directory>\ahzqeygjff.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UFRRZYLYLO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AKKDHCFDAS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HQVHQGGROF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KLMGGIPMBD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KEBZLLXWUO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TMOREHRUKO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GMVNYMVVUC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TEDKKJHFER.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KPMHGCSZVO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WATJAMIZQP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QFMKUNOWPQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DYBGOSAXYE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JDMLONTLNQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TLZCPSNBDR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZRKOYVGPRD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JHXYZSAFZE.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PMIKAVTTOQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GQHSBQCYHP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AHZQEYGJFF.exe"
