Technical Information
Modifies file system
Creates the following files
- <Current directory>\hgaqrupejp.exe
- <Current directory>\fmvmfwwnmd.exe
- <Current directory>\puiegaimud.exe
- <Current directory>\vztioejriq.exe
- <Current directory>\cfeuxzcfxc.exe
- <Current directory>\lvrdqewvnd.exe
- <Current directory>\vdfvriiuvd.exe
- <Current directory>\idmsdfuver.exe
- <Current directory>\vwtopkyeon.exe
- <Current directory>\cjeopbnsrn.exe
- <Current directory>\ioalihknyc.exe
- <Current directory>\bubmdiicwc.exe
- <Current directory>\lcgdwmcsmd.exe
- <Current directory>\ycnapjgbvr.exe
- <Current directory>\bxezfmpwiq.exe
- <Current directory>\bqbsdofoca.exe
- nul
- <Current directory>\oiipxujplo.exe
- <Current directory>\uottfpldab.exe
- <Current directory>\otlprletmo.exe
- <Current directory>\pqxrdwjjhq.exe
Deletes the following files
- <Current directory>\hgaqrupejp.exe
- <Current directory>\cjeopbnsrn.exe
- <Current directory>\puiegaimud.exe
- <Current directory>\vztioejriq.exe
- <Current directory>\cfeuxzcfxc.exe
- <Current directory>\lvrdqewvnd.exe
- <Current directory>\vdfvriiuvd.exe
- <Current directory>\idmsdfuver.exe
- <Current directory>\vwtopkyeon.exe
- <Current directory>\ioalihknyc.exe
- <Current directory>\bubmdiicwc.exe
- <Current directory>\otlprletmo.exe
- <Current directory>\lcgdwmcsmd.exe
- <Current directory>\ycnapjgbvr.exe
- <Current directory>\bxezfmpwiq.exe
- <Current directory>\bqbsdofoca.exe
- <Current directory>\oiipxujplo.exe
- <Current directory>\uottfpldab.exe
- <Current directory>\pqxrdwjjhq.exe
- <Current directory>\fmvmfwwnmd.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\hgaqrupejp.exe'
- '<Current directory>\fmvmfwwnmd.exe'
- '<Current directory>\puiegaimud.exe'
- '<Current directory>\vztioejriq.exe'
- '<Current directory>\cfeuxzcfxc.exe'
- '<Current directory>\lvrdqewvnd.exe'
- '<Current directory>\vdfvriiuvd.exe'
- '<Current directory>\idmsdfuver.exe'
- '<Current directory>\vwtopkyeon.exe'
- '<Current directory>\ioalihknyc.exe'
- '<Current directory>\otlprletmo.exe'
- '<Current directory>\bubmdiicwc.exe'
- '<Current directory>\lcgdwmcsmd.exe'
- '<Current directory>\ycnapjgbvr.exe'
- '<Current directory>\bxezfmpwiq.exe'
- '<Current directory>\bqbsdofoca.exe'
- '<Current directory>\oiipxujplo.exe'
- '<Current directory>\uottfpldab.exe'
- '<Current directory>\cjeopbnsrn.exe'
- '<Current directory>\pqxrdwjjhq.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PXIXYUTZOO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CYQURZXIXC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PQXRDWJJHQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CJEOPBNSRN.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FMVMFWWNMD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PUIEGAIMUD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VZTIOEJRIQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CFEUXZCFXC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LVRDQEWVND.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VDFVRIIUVD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IDMSDFUVER.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VWTOPKYEON.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IOALIHKNYC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OTLPRLETMO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BUBMDIICWC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LCGDWMCSMD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YCNAPJGBVR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BXEZFMPWIQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BQBSDOFOCA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OIIPXUJPLO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UOTTFPLDAB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HGAQRUPEJP.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CFTBMXOQEA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MCSYIRKEBP.exe"
