Technical Information
Modifies file system
Creates the following files
- <Current directory>\ochvhkpajx.exe
- <Current directory>\zhmdrplauw.exe
- <Current directory>\mzuzdmxjdl.exe
- <Current directory>\wphjeqiitl.exe
- <Current directory>\msilioftwv.exe
- <Current directory>\tybxjsghli.exe
- <Current directory>\cogpkwsybi.exe
- <Current directory>\pgwdwtehlw.exe
- <Current directory>\cydapyjqul.exe
- <Current directory>\moqrjvcgkl.exe
- <Current directory>\mzfloxlqev.exe
- <Current directory>\ihzztyjyvk.exe
- <Current directory>\sxmjudcolk.exe
- <Current directory>\fqufgahxvz.exe
- <Current directory>\fiizlcxhoj.exe
- <Current directory>\pywqegjgwk.exe
- <Current directory>\fbxsienshm.exe
- nul
- <Current directory>\sumpcjsbri.exe
- <Current directory>\bkrgvfdzzi.exe
- <Current directory>\qrzlqlzklw.exe
- <Current directory>\aoyjmnuqau.exe
Deletes the following files
- <Current directory>\ochvhkpajx.exe
- <Current directory>\aoyjmnuqau.exe
- <Current directory>\mzuzdmxjdl.exe
- <Current directory>\wphjeqiitl.exe
- <Current directory>\msilioftwv.exe
- <Current directory>\tybxjsghli.exe
- <Current directory>\cogpkwsybi.exe
- <Current directory>\cydapyjqul.exe
- <Current directory>\pgwdwtehlw.exe
- <Current directory>\qrzlqlzklw.exe
- <Current directory>\moqrjvcgkl.exe
- <Current directory>\ihzztyjyvk.exe
- <Current directory>\sxmjudcolk.exe
- <Current directory>\fqufgahxvz.exe
- <Current directory>\pywqegjgwk.exe
- <Current directory>\fiizlcxhoj.exe
- <Current directory>\fbxsienshm.exe
- <Current directory>\sumpcjsbri.exe
- <Current directory>\bkrgvfdzzi.exe
- <Current directory>\mzfloxlqev.exe
- <Current directory>\zhmdrplauw.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\ochvhkpajx.exe'
- '<Current directory>\zhmdrplauw.exe'
- '<Current directory>\mzuzdmxjdl.exe'
- '<Current directory>\wphjeqiitl.exe'
- '<Current directory>\msilioftwv.exe'
- '<Current directory>\tybxjsghli.exe'
- '<Current directory>\cogpkwsybi.exe'
- '<Current directory>\pgwdwtehlw.exe'
- '<Current directory>\cydapyjqul.exe'
- '<Current directory>\qrzlqlzklw.exe'
- '<Current directory>\moqrjvcgkl.exe'
- '<Current directory>\ihzztyjyvk.exe'
- '<Current directory>\sxmjudcolk.exe'
- '<Current directory>\fqufgahxvz.exe'
- '<Current directory>\fiizlcxhoj.exe'
- '<Current directory>\pywqegjgwk.exe'
- '<Current directory>\fbxsienshm.exe'
- '<Current directory>\sumpcjsbri.exe'
- '<Current directory>\bkrgvfdzzi.exe'
- '<Current directory>\mzfloxlqev.exe'
- '<Current directory>\aoyjmnuqau.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZHMDRPLAUW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MZUZDMXJDL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WPHJEQIITL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MSILIOFTWV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TYBXJSGHLI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\COGPKWSYBI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PGWDWTEHLW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CYDAPYJQUL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MOQRJVCGKL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QRZLQLZKLW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MZFLOXLQEV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SXMJUDCOLK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FQUFGAHXVZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FIIZLCXHOJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PYWQEGJGWK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FBXSIENSHM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SUMPCJSBRI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BKRGVFDZZI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OCHVHKPAJX.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IHZZTYJYVK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AOYJMNUQAU.exe"
