Technical Information
Modifies file system
Creates the following files
- <Current directory>\favprqkyee.exe
- <Current directory>\nvgjiunnnq.exe
- <Current directory>\dxqtnarzzs.exe
- <Current directory>\tazvrxotcc.exe
- <Current directory>\dqffscarsd.exe
- <Current directory>\qjmcezmscr.exe
- <Current directory>\wofomcfgqd.exe
- <Current directory>\duqsvggleq.exe
- <Current directory>\jzbevcaztc.exe
- <Current directory>\pfuiefbfhp.exe
- <Current directory>\aczmxxieec.exe
- <Current directory>\cxbfykford.exe
- <Current directory>\cqqyvnwykf.exe
- <Current directory>\pixvhkahuc.exe
- <Current directory>\zykeiouxkc.exe
- <Current directory>\mrrbulyhuq.exe
- <Current directory>\zjzyfqkqdf.exe
- <Current directory>\mjovznornt.exe
- <Current directory>\pfxtpqxuar.exe
- nul
- <Current directory>\vkqgyuqzoe.exe
- <Current directory>\tadhcikicf.exe
- <Current directory>\qmmdwspowb.exe
Deletes the following files
- <Current directory>\favprqkyee.exe
- <Current directory>\aczmxxieec.exe
- <Current directory>\nvgjiunnnq.exe
- <Current directory>\tazvrxotcc.exe
- <Current directory>\qjmcezmscr.exe
- <Current directory>\dqffscarsd.exe
- <Current directory>\wofomcfgqd.exe
- <Current directory>\duqsvggleq.exe
- <Current directory>\jzbevcaztc.exe
- <Current directory>\pfuiefbfhp.exe
- <Current directory>\cxbfykford.exe
- <Current directory>\tadhcikicf.exe
- <Current directory>\cqqyvnwykf.exe
- <Current directory>\pixvhkahuc.exe
- <Current directory>\mrrbulyhuq.exe
- <Current directory>\zykeiouxkc.exe
- <Current directory>\zjzyfqkqdf.exe
- <Current directory>\pfxtpqxuar.exe
- <Current directory>\mjovznornt.exe
- <Current directory>\vkqgyuqzoe.exe
- <Current directory>\qmmdwspowb.exe
- <Current directory>\dxqtnarzzs.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\favprqkyee.exe'
- '<Current directory>\nvgjiunnnq.exe'
- '<Current directory>\dxqtnarzzs.exe'
- '<Current directory>\tazvrxotcc.exe'
- '<Current directory>\dqffscarsd.exe'
- '<Current directory>\qjmcezmscr.exe'
- '<Current directory>\wofomcfgqd.exe'
- '<Current directory>\duqsvggleq.exe'
- '<Current directory>\jzbevcaztc.exe'
- '<Current directory>\pfuiefbfhp.exe'
- '<Current directory>\cxbfykford.exe'
- '<Current directory>\tadhcikicf.exe'
- '<Current directory>\cqqyvnwykf.exe'
- '<Current directory>\pixvhkahuc.exe'
- '<Current directory>\zykeiouxkc.exe'
- '<Current directory>\mrrbulyhuq.exe'
- '<Current directory>\zjzyfqkqdf.exe'
- '<Current directory>\mjovznornt.exe'
- '<Current directory>\pfxtpqxuar.exe'
- '<Current directory>\vkqgyuqzoe.exe'
- '<Current directory>\aczmxxieec.exe'
- '<Current directory>\qmmdwspowb.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NRDEGXOLBD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QMMDWSPOWB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ACZMXXIEEC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NVGJIUNNNQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DXQTNARZZS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TAZVRXOTCC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DQFFSCARSD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QJMCEZMSCR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WOFOMCFGQD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DUQSVGGLEQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JZBEVCAZTC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KOMXQVFQOE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PFUIEFBFHP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TADHCIKICF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CQQYVNWYKF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PIXVHKAHUC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZYKEIOUXKC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MRRBULYHUQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZJZYFQKQDF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MJOVZNORNT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PFXTPQXUAR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VKQGYUQZOE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FAVPRQKYEE.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CXBFYKFORD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DQTTHRMCZS.exe"
