Technical Information
Modifies file system
Creates the following files
- <Current directory>\klidkmgwch.exe
- <Current directory>\fvxltwbrup.exe
- <Current directory>\vyzoxbxlfs.exe
- <Current directory>\iqgkjzbupg.exe
- <Current directory>\ytqmneggsq.exe
- <Current directory>\owzwrcdads.exe
- <Current directory>\eybywaztpd.exe
- <Current directory>\psojoyefrf.exe
- <Current directory>\bhvfibxtgr.exe
- <Current directory>\brsygeodau.exe
- <Current directory>\hxdkohprog.exe
- <Current directory>\yaemtfmlzq.exe
- <Current directory>\efxqbjfqod.exe
- nul
- <Current directory>\uizafokkrf.exe
- <Current directory>\rkfpnhunst.exe
- <Current directory>\cshndbswhr.exe
Deletes the following files
- <Current directory>\klidkmgwch.exe
- <Current directory>\efxqbjfqod.exe
- <Current directory>\uizafokkrf.exe
- <Current directory>\yaemtfmlzq.exe
- <Current directory>\hxdkohprog.exe
- <Current directory>\brsygeodau.exe
- <Current directory>\rkfpnhunst.exe
- <Current directory>\bhvfibxtgr.exe
- <Current directory>\eybywaztpd.exe
- <Current directory>\owzwrcdads.exe
- <Current directory>\ytqmneggsq.exe
- <Current directory>\iqgkjzbupg.exe
- <Current directory>\fvxltwbrup.exe
- <Current directory>\vyzoxbxlfs.exe
- <Current directory>\psojoyefrf.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\klidkmgwch.exe'
- '<Current directory>\uizafokkrf.exe'
- '<Current directory>\efxqbjfqod.exe'
- '<Current directory>\yaemtfmlzq.exe'
- '<Current directory>\hxdkohprog.exe'
- '<Current directory>\brsygeodau.exe'
- '<Current directory>\rkfpnhunst.exe'
- '<Current directory>\bhvfibxtgr.exe'
- '<Current directory>\eybywaztpd.exe'
- '<Current directory>\owzwrcdads.exe'
- '<Current directory>\ytqmneggsq.exe'
- '<Current directory>\iqgkjzbupg.exe'
- '<Current directory>\vyzoxbxlfs.exe'
- '<Current directory>\fvxltwbrup.exe'
- '<Current directory>\psojoyefrf.exe'
- '<Current directory>\cshndbswhr.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VYZOXBXLFS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IQGKJZBUPG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YTQMNEGGSQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OWZWRCDADS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EYBYWAZTPD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BHVFIBXTGR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FVXLTWBRUP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RKFPNHUNST.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HXDKOHPROG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YAEMTFMLZQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EFXQBJFQOD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UIZAFOKKRF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KLIDKMGWCH.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BRSYGEODAU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PSOJOYEFRF.exe"
