Technical Information
Modifies file system
Creates the following files
- <Current directory>\qwpvphpbji.exe
- <Current directory>\gojeoldlbi.exe
- nul
- <Current directory>\xywungkmlh.exe
- <Current directory>\qslinlihwv.exe
- <Current directory>\qhpxhjawdt.exe
- <Current directory>\neyqrgruqu.exe
- <Current directory>\hznmjcqoci.exe
- <Current directory>\eewntzplhj.exe
- <Current directory>\bifodwgqut.exe
- <Current directory>\rsaxbauses.exe
- <Current directory>\oxjymxmxru.exe
- <Current directory>\uzjxrwgitt.exe
- <Current directory>\yrxjeviitf.exe
- <Current directory>\rlefwrpvfs.exe
- <Current directory>\yflwcrjghs.exe
Deletes the following files
- <Current directory>\qwpvphpbji.exe
- <Current directory>\gojeoldlbi.exe
- <Current directory>\xywungkmlh.exe
- <Current directory>\qslinlihwv.exe
- <Current directory>\qhpxhjawdt.exe
- <Current directory>\neyqrgruqu.exe
- <Current directory>\hznmjcqoci.exe
- <Current directory>\eewntzplhj.exe
- <Current directory>\bifodwgqut.exe
- <Current directory>\rsaxbauses.exe
- <Current directory>\uzjxrwgitt.exe
- <Current directory>\oxjymxmxru.exe
- <Current directory>\yrxjeviitf.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\qwpvphpbji.exe'
- '<Current directory>\gojeoldlbi.exe'
- '<Current directory>\xywungkmlh.exe'
- '<Current directory>\qslinlihwv.exe'
- '<Current directory>\qhpxhjawdt.exe'
- '<Current directory>\neyqrgruqu.exe'
- '<Current directory>\hznmjcqoci.exe'
- '<Current directory>\eewntzplhj.exe'
- '<Current directory>\bifodwgqut.exe'
- '<Current directory>\rsaxbauses.exe'
- '<Current directory>\oxjymxmxru.exe'
- '<Current directory>\uzjxrwgitt.exe'
- '<Current directory>\yrxjeviitf.exe'
- '<Current directory>\rlefwrpvfs.exe'
- '<Current directory>\yflwcrjghs.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YRXJEVIITF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UZJXRWGITT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OXJYMXMXRU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RSAXBAUSES.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BIFODWGQUT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EEWNTZPLHJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RLEFWRPVFS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HZNMJCQOCI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QHPXHJAWDT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QSLINLIHWV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XYWUNGKMLH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GOJEOLDLBI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QWPVPHPBJI.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NEYQRGRUQU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YFLWCRJGHS.exe"
