Technical Information
Modifies file system
Creates the following files
- <Current directory>\qrtgrjrglj.exe
- <Current directory>\lmmxusyfmj.exe
- <Current directory>\yetuoxkgwx.exe
- <Current directory>\kwbrzuopft.exe
- <Current directory>\xxiolzaypi.exe
- <Current directory>\xifhqtjiik.exe
- <Current directory>\kimecyvjsg.exe
- <Current directory>\aloggwsddj.exe
- <Current directory>\norwydmwgh.exe
- <Current directory>\utcayzokuu.exe
- <Current directory>\djqszdzbcu.exe
- <Current directory>\tmzudbwuow.exe
- <Current directory>\gfgqpgidxl.exe
- <Current directory>\tizamithtu.exe
- nul
- <Current directory>\gbgxxnxidi.exe
- <Current directory>\bwzgbnmgei.exe
- <Current directory>\uqocsslbhw.exe
Deletes the following files
- <Current directory>\qrtgrjrglj.exe
- <Current directory>\gbgxxnxidi.exe
- <Current directory>\tizamithtu.exe
- <Current directory>\gfgqpgidxl.exe
- <Current directory>\tmzudbwuow.exe
- <Current directory>\djqszdzbcu.exe
- <Current directory>\utcayzokuu.exe
- <Current directory>\norwydmwgh.exe
- <Current directory>\aloggwsddj.exe
- <Current directory>\kimecyvjsg.exe
- <Current directory>\xifhqtjiik.exe
- <Current directory>\xxiolzaypi.exe
- <Current directory>\kwbrzuopft.exe
- <Current directory>\lmmxusyfmj.exe
- <Current directory>\yetuoxkgwx.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\qrtgrjrglj.exe'
- '<Current directory>\lmmxusyfmj.exe'
- '<Current directory>\yetuoxkgwx.exe'
- '<Current directory>\kwbrzuopft.exe'
- '<Current directory>\xxiolzaypi.exe'
- '<Current directory>\xifhqtjiik.exe'
- '<Current directory>\kimecyvjsg.exe'
- '<Current directory>\bwzgbnmgei.exe'
- '<Current directory>\aloggwsddj.exe'
- '<Current directory>\utcayzokuu.exe'
- '<Current directory>\djqszdzbcu.exe'
- '<Current directory>\tmzudbwuow.exe'
- '<Current directory>\gfgqpgidxl.exe'
- '<Current directory>\tizamithtu.exe'
- '<Current directory>\gbgxxnxidi.exe'
- '<Current directory>\norwydmwgh.exe'
- '<Current directory>\uqocsslbhw.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\LMMXUSYFMJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YETUOXKGWX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KWBRZUOPFT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XXIOLZAYPI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XIFHQTJIIK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KIMECYVJSG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ALOGGWSDDJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BWZGBNMGEI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NORWYDMWGH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DJQSZDZBCU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TMZUDBWUOW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GFGQPGIDXL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TIZAMITHTU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GBGXXNXIDI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QRTGRJRGLJ.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UTCAYZOKUU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UQOCSSLBHW.exe"
