Technical Information
Modifies file system
Creates the following files
- <Current directory>\gewvjnapah.exe
- <Current directory>\brpenwoobh.exe
- <Current directory>\orwbgttpkv.exe
- <Current directory>\vwhnhwuczi.exe
- <Current directory>\hpxjauyljw.exe
- <Current directory>\rfctuyscrw.exe
- <Current directory>\exrqnvwlas.exe
- <Current directory>\hsaodyfgvj.exe
- <Current directory>\yvyfxtglgi.exe
- <Current directory>\korvtbgjih.exe
- <Current directory>\nbwopgfowi.exe
- <Current directory>\xrjxicrmej.exe
- <Current directory>\qpkgclwbcj.exe
- <Current directory>\dqrdwiicmg.exe
- nul
- <Current directory>\nywmpmuacg.exe
- <Current directory>\tdpyxivgqs.exe
- <Current directory>\rtczcehowu.exe
- <Current directory>\oflwdouuyi.exe
Deletes the following files
- <Current directory>\gewvjnapah.exe
- <Current directory>\brpenwoobh.exe
- <Current directory>\orwbgttpkv.exe
- <Current directory>\vwhnhwuczi.exe
- <Current directory>\hpxjauyljw.exe
- <Current directory>\rfctuyscrw.exe
- <Current directory>\exrqnvwlas.exe
- <Current directory>\hsaodyfgvj.exe
- <Current directory>\korvtbgjih.exe
- <Current directory>\rtczcehowu.exe
- <Current directory>\nbwopgfowi.exe
- <Current directory>\xrjxicrmej.exe
- <Current directory>\qpkgclwbcj.exe
- <Current directory>\dqrdwiicmg.exe
- <Current directory>\nywmpmuacg.exe
- <Current directory>\tdpyxivgqs.exe
- <Current directory>\yvyfxtglgi.exe
- <Current directory>\oflwdouuyi.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\gewvjnapah.exe'
- '<Current directory>\brpenwoobh.exe'
- '<Current directory>\orwbgttpkv.exe'
- '<Current directory>\vwhnhwuczi.exe'
- '<Current directory>\hpxjauyljw.exe'
- '<Current directory>\rfctuyscrw.exe'
- '<Current directory>\exrqnvwlas.exe'
- '<Current directory>\hsaodyfgvj.exe'
- '<Current directory>\korvtbgjih.exe'
- '<Current directory>\rtczcehowu.exe'
- '<Current directory>\nbwopgfowi.exe'
- '<Current directory>\xrjxicrmej.exe'
- '<Current directory>\qpkgclwbcj.exe'
- '<Current directory>\dqrdwiicmg.exe'
- '<Current directory>\nywmpmuacg.exe'
- '<Current directory>\tdpyxivgqs.exe'
- '<Current directory>\yvyfxtglgi.exe'
- '<Current directory>\oflwdouuyi.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YVYFXTGLGI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BRPENWOOBH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ORWBGTTPKV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VWHNHWUCZI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HPXJAUYLJW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RFCTUYSCRW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EXRQNVWLAS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HSAODYFGVJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OFLWDOUUYI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KORVTBGJIH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NBWOPGFOWI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XRJXICRMEJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QPKGCLWBCJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DQRDWIICMG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NYWMPMUACG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TDPYXIVGQS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GEWVJNAPAH.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RTCZCEHOWU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IAAJVLTHJW.exe"
