Technical Information
Modifies file system
Creates the following files
- <Current directory>\pjiiicigug.exe
- <Current directory>\kebzllxwuo.exe
- <Current directory>\tmorehruko.exe
- <Current directory>\wpfpckspxf.exe
- <Current directory>\jhmmoheyhb.exe
- <Current directory>\jabgljujad.exe
- <Current directory>\zdkiqprclg.exe
- <Current directory>\mvsejmvevc.exe
- <Current directory>\tbcisqxrjo.exe
- <Current directory>\cjqaluiirp.exe
- <Current directory>\jobeuqkvgb.exe
- <Current directory>\wpibfvoeqp.exe
- <Current directory>\fxvsgrivgq.exe
- <Current directory>\pmikavttoq.exe
- <Current directory>\mvdqmxrsnf.exe
- nul
- <Current directory>\vlihnbdjvf.exe
- <Current directory>\ftvzhyxhlf.exe
- <Current directory>\dyqvdheqgb.exe
- <Current directory>\nvglybzxdr.exe
Deletes the following files
- <Current directory>\pjiiicigug.exe
- <Current directory>\tmorehruko.exe
- <Current directory>\wpfpckspxf.exe
- <Current directory>\jhmmoheyhb.exe
- <Current directory>\jabgljujad.exe
- <Current directory>\zdkiqprclg.exe
- <Current directory>\mvsejmvevc.exe
- <Current directory>\cjqaluiirp.exe
- <Current directory>\tbcisqxrjo.exe
- <Current directory>\jobeuqkvgb.exe
- <Current directory>\wpibfvoeqp.exe
- <Current directory>\fxvsgrivgq.exe
- <Current directory>\pmikavttoq.exe
- <Current directory>\mvdqmxrsnf.exe
- <Current directory>\vlihnbdjvf.exe
- <Current directory>\ftvzhyxhlf.exe
- <Current directory>\kebzllxwuo.exe
- <Current directory>\dyqvdheqgb.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\pjiiicigug.exe'
- '<Current directory>\kebzllxwuo.exe'
- '<Current directory>\tmorehruko.exe'
- '<Current directory>\wpfpckspxf.exe'
- '<Current directory>\jhmmoheyhb.exe'
- '<Current directory>\jabgljujad.exe'
- '<Current directory>\zdkiqprclg.exe'
- '<Current directory>\mvsejmvevc.exe'
- '<Current directory>\dyqvdheqgb.exe'
- '<Current directory>\tbcisqxrjo.exe'
- '<Current directory>\jobeuqkvgb.exe'
- '<Current directory>\wpibfvoeqp.exe'
- '<Current directory>\fxvsgrivgq.exe'
- '<Current directory>\pmikavttoq.exe'
- '<Current directory>\mvdqmxrsnf.exe'
- '<Current directory>\vlihnbdjvf.exe'
- '<Current directory>\ftvzhyxhlf.exe'
- '<Current directory>\cjqaluiirp.exe'
- '<Current directory>\nvglybzxdr.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DYQVDHEQGB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KEBZLLXWUO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TMOREHRUKO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WPFPCKSPXF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JHMMOHEYHB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JABGLJUJAD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZDKIQPRCLG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MVSEJMVEVC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TBCISQXRJO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CJQALUIIRP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JOBEUQKVGB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WPIBFVOEQP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FXVSGRIVGQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PMIKAVTTOQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MVDQMXRSNF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VLIHNBDJVF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FTVZHYXHLF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PJIIICIGUG.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NVGLYBZXDR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AVZWNEVNTD.exe"
