Technical Information
Modifies file system
Creates the following files
- <Current directory>\aeqgoorkst.exe
- <Current directory>\vogkoshghg.exe
- <Current directory>\btropwbtvt.exe
- <Current directory>\ouyljtfcfh.exe
- <Current directory>\uzjxrwgitt.exe
- <Current directory>\ehwgktagbu.exe
- <Current directory>\hcnfawbbws.exe
- <Current directory>\rsaxbauses.exe
- <Current directory>\bifodwgqut.exe
- <Current directory>\ivznvnveps.exe
- <Current directory>\eewntzplhj.exe
- <Current directory>\amrtfbnshg.exe
- <Current directory>\kcelzfzjpg.exe
- <Current directory>\xnabqetcsf.exe
- <Current directory>\aiqaghcxmv.exe
- nul
- <Current directory>\kyerhlovvw.exe
- <Current directory>\xqlosjaees.exe
- <Current directory>\gyyxunmvus.exe
- <Current directory>\ntjemebjxk.exe
- <Current directory>\vdjrjqrvfw.exe
Deletes the following files
- <Current directory>\gyyxunmvus.exe
- <Current directory>\btropwbtvt.exe
- <Current directory>\ouyljtfcfh.exe
- <Current directory>\ehwgktagbu.exe
- <Current directory>\uzjxrwgitt.exe
- <Current directory>\hcnfawbbws.exe
- <Current directory>\rsaxbauses.exe
- <Current directory>\eewntzplhj.exe
- <Current directory>\ivznvnveps.exe
- <Current directory>\bifodwgqut.exe
- <Current directory>\amrtfbnshg.exe
- <Current directory>\kcelzfzjpg.exe
- <Current directory>\xnabqetcsf.exe
- <Current directory>\aiqaghcxmv.exe
- <Current directory>\kyerhlovvw.exe
- <Current directory>\xqlosjaees.exe
- <Current directory>\aeqgoorkst.exe
- <Current directory>\ntjemebjxk.exe
- <Current directory>\vdjrjqrvfw.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\aeqgoorkst.exe'
- '<Current directory>\vogkoshghg.exe'
- '<Current directory>\btropwbtvt.exe'
- '<Current directory>\ouyljtfcfh.exe'
- '<Current directory>\uzjxrwgitt.exe'
- '<Current directory>\ehwgktagbu.exe'
- '<Current directory>\hcnfawbbws.exe'
- '<Current directory>\rsaxbauses.exe'
- '<Current directory>\bifodwgqut.exe'
- '<Current directory>\eewntzplhj.exe'
- '<Current directory>\ntjemebjxk.exe'
- '<Current directory>\amrtfbnshg.exe'
- '<Current directory>\kcelzfzjpg.exe'
- '<Current directory>\xnabqetcsf.exe'
- '<Current directory>\aiqaghcxmv.exe'
- '<Current directory>\kyerhlovvw.exe'
- '<Current directory>\xqlosjaees.exe'
- '<Current directory>\gyyxunmvus.exe'
- '<Current directory>\ivznvnveps.exe'
- '<Current directory>\vdjrjqrvfw.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VDJRJQRVFW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\IVZNVNVEPS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VOGKOSHGHG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BTROPWBTVT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OUYLJTFCFH.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UZJXRWGITT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EHWGKTAGBU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HCNFAWBBWS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RSAXBAUSES.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BIFODWGQUT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EEWNTZPLHJ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NTJEMEBJXK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AMRTFBNSHG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KCELZFZJPG.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XNABQETCSF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AIQAGHCXMV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KYERHLOVVW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XQLOSJAEES.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GYYXUNMVUS.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AEQGOORKST.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VKVXMOALMT.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ISNASJWCCF.exe"
