Technical Information
Modifies file system
Creates the following files
- <Current directory>\rciiwmlruw.exe
- <Current directory>\zxtcfynhli.exe
- <Current directory>\fcegotpuau.exe
- <Current directory>\wfniszlgde.exe
- <Current directory>\jgvfewqpnt.exe
- <Current directory>\snaxfbjodt.exe
- <Current directory>\cdnogxvelt.exe
- <Current directory>\sgxqcdaywv.exe
- <Current directory>\cwkzdzloew.exe
- <Current directory>\leprfdfnuw.exe
- <Current directory>\skidfhzsji.exe
- <Current directory>\fkpszedbsf.exe
- <Current directory>\scwpljpkct.exe
- <Current directory>\ifgzphmwfv.exe
- <Current directory>\yihbtfiqqf.exe
- <Current directory>\bdyzjirtdw.exe
- <Current directory>\sgicngofpg.exe
- <Current directory>\ijjeslszsi.exe
- <Current directory>\ymtowjptdt.exe
- <Current directory>\icgxxobjtt.exe
- nul
- <Current directory>\yehztlfdwv.exe
- <Current directory>\ohrjyjcxhf.exe
- <Current directory>\ekalcpzqlh.exe
- <Current directory>\meefutjgct.exe
- <Current directory>\zmwjiwxxsf.exe
Deletes the following files
- <Current directory>\rciiwmlruw.exe
- <Current directory>\meefutjgct.exe
- <Current directory>\wfniszlgde.exe
- <Current directory>\fcegotpuau.exe
- <Current directory>\jgvfewqpnt.exe
- <Current directory>\snaxfbjodt.exe
- <Current directory>\cdnogxvelt.exe
- <Current directory>\sgxqcdaywv.exe
- <Current directory>\cwkzdzloew.exe
- <Current directory>\leprfdfnuw.exe
- <Current directory>\skidfhzsji.exe
- <Current directory>\zmwjiwxxsf.exe
- <Current directory>\fkpszedbsf.exe
- <Current directory>\ifgzphmwfv.exe
- <Current directory>\yihbtfiqqf.exe
- <Current directory>\bdyzjirtdw.exe
- <Current directory>\sgicngofpg.exe
- <Current directory>\ijjeslszsi.exe
- <Current directory>\ymtowjptdt.exe
- <Current directory>\icgxxobjtt.exe
- <Current directory>\yehztlfdwv.exe
- <Current directory>\ohrjyjcxhf.exe
- <Current directory>\ekalcpzqlh.exe
- <Current directory>\scwpljpkct.exe
- <Current directory>\zxtcfynhli.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\rciiwmlruw.exe'
- '<Current directory>\zxtcfynhli.exe'
- '<Current directory>\fcegotpuau.exe'
- '<Current directory>\wfniszlgde.exe'
- '<Current directory>\jgvfewqpnt.exe'
- '<Current directory>\snaxfbjodt.exe'
- '<Current directory>\cdnogxvelt.exe'
- '<Current directory>\sgxqcdaywv.exe'
- '<Current directory>\cwkzdzloew.exe'
- '<Current directory>\leprfdfnuw.exe'
- '<Current directory>\skidfhzsji.exe'
- '<Current directory>\meefutjgct.exe'
- '<Current directory>\fkpszedbsf.exe'
- '<Current directory>\ifgzphmwfv.exe'
- '<Current directory>\yihbtfiqqf.exe'
- '<Current directory>\bdyzjirtdw.exe'
- '<Current directory>\sgicngofpg.exe'
- '<Current directory>\ijjeslszsi.exe'
- '<Current directory>\ymtowjptdt.exe'
- '<Current directory>\icgxxobjtt.exe'
- '<Current directory>\yehztlfdwv.exe'
- '<Current directory>\ohrjyjcxhf.exe'
- '<Current directory>\ekalcpzqlh.exe'
- '<Current directory>\scwpljpkct.exe'
- '<Current directory>\zmwjiwxxsf.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GVHOILJYBU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JRYNYOKTOS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TGLXZSEJET.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZMWJIWXXSF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MEEFUTJGCT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZXTCFYNHLI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FCEGOTPUAU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WFNISZLGDE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JGVFEWQPNT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SNAXFBJODT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CDNOGXVELT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SGXQCDAYWV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CWKZDZLOEW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LEPRFDFNUW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SKIDFHZSJI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FKPSZEDBSF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SCWPLJPKCT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IFGZPHMWFV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YIHBTFIQQF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BDYZJIRTDW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SGICNGOFPG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IJJESLSZSI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YMTOWJPTDT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ICGXXOBJTT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YEHZTLFDWV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OHRJYJCXHF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EKALCPZQLH.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RCIIWMLRUW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JNVAVJLQBF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JUYHYHVGIV.exe"
