Technical Information
Modifies file system
Creates the following files
- <Current directory>\peudehuuux.exe
- <Current directory>\kznuhqisnf.exe
- <Current directory>\wruqtnntft.exe
- <Current directory>\jkcnesrcoi.exe
- <Current directory>\tzpxgoltwi.exe
- <Current directory>\zfajosmglu.exe
- <Current directory>\mxhfapqhuj.exe
- <Current directory>\zypcmuuqex.exe
- <Current directory>\jgcmnyopux.exe
- <Current directory>\ajacglpufx.exe
- <Current directory>\twpdgvafcg.exe
- <Current directory>\fhltxcuzfw.exe
- <Current directory>\mmexfywmtj.exe
- <Current directory>\wcjphchdjj.exe
- <Current directory>\jvymszumty.exe
- <Current directory>\ifnfqbkwmi.exe
- nul
- <Current directory>\svaorgwuui.exe
- <Current directory>\yblbzjxajv.exe
- <Current directory>\cmcuhztesg.exe
- <Current directory>\qbnlfpdvpw.exe
Deletes the following files
- <Current directory>\peudehuuux.exe
- <Current directory>\jkcnesrcoi.exe
- <Current directory>\wruqtnntft.exe
- <Current directory>\tzpxgoltwi.exe
- <Current directory>\mxhfapqhuj.exe
- <Current directory>\zfajosmglu.exe
- <Current directory>\zypcmuuqex.exe
- <Current directory>\jgcmnyopux.exe
- <Current directory>\kznuhqisnf.exe
- <Current directory>\fhltxcuzfw.exe
- <Current directory>\twpdgvafcg.exe
- <Current directory>\mmexfywmtj.exe
- <Current directory>\wcjphchdjj.exe
- <Current directory>\jvymszumty.exe
- <Current directory>\svaorgwuui.exe
- <Current directory>\ifnfqbkwmi.exe
- <Current directory>\yblbzjxajv.exe
- <Current directory>\cmcuhztesg.exe
- <Current directory>\ajacglpufx.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\peudehuuux.exe'
- '<Current directory>\kznuhqisnf.exe'
- '<Current directory>\wruqtnntft.exe'
- '<Current directory>\jkcnesrcoi.exe'
- '<Current directory>\tzpxgoltwi.exe'
- '<Current directory>\zfajosmglu.exe'
- '<Current directory>\mxhfapqhuj.exe'
- '<Current directory>\zypcmuuqex.exe'
- '<Current directory>\jgcmnyopux.exe'
- '<Current directory>\twpdgvafcg.exe'
- '<Current directory>\cmcuhztesg.exe'
- '<Current directory>\fhltxcuzfw.exe'
- '<Current directory>\mmexfywmtj.exe'
- '<Current directory>\wcjphchdjj.exe'
- '<Current directory>\jvymszumty.exe'
- '<Current directory>\ifnfqbkwmi.exe'
- '<Current directory>\svaorgwuui.exe'
- '<Current directory>\yblbzjxajv.exe'
- '<Current directory>\ajacglpufx.exe'
- '<Current directory>\qbnlfpdvpw.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WRUQTNNTFT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JKCNESRCOI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TZPXGOLTWI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZFAJOSMGLU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MXHFAPQHUJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZYPCMUUQEX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JGCMNYOPUX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TWPDGVAFCG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KZNUHQISNF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CMCUHZTESG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MMEXFYWMTJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WCJPHCHDJJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JVYMSZUMTY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IFNFQBKWMI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SVAORGWUUI.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YBLBZJXAJV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PEUDEHUUUX.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FHLTXCUZFW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AJACGLPUFX.exe"
