Technical Information
Modifies file system
Creates the following files
- <Current directory>\jamrwuiyto.exe
- <Current directory>\khbtdeijoq.exe
- <Current directory>\upokebuifq.exe
- <Current directory>\hqvhqggrof.exe
- <Current directory>\uidebdksyb.exe
- <Current directory>\gbkaviwbhp.exe
- <Current directory>\kebzllxwuo.exe
- <Current directory>\xwiwxijfec.exe
- <Current directory>\arzvnlkazs.exe
- <Current directory>\quixripucd.exe
- <Current directory>\mcdlekftcr.exe
- <Current directory>\wsicfozsks.exe
- <Current directory>\jlxzrldtto.exe
- <Current directory>\tbcisqxrjo.exe
- <Current directory>\jobeuqkvgb.exe
- nul
- <Current directory>\jhxyzsafze.exe
- <Current directory>\wzfulxeojs.exe
- <Current directory>\xpuerzeifc.exe
- <Current directory>\kpmhgcszvo.exe
Deletes the following files
- <Current directory>\jamrwuiyto.exe
- <Current directory>\khbtdeijoq.exe
- <Current directory>\upokebuifq.exe
- <Current directory>\hqvhqggrof.exe
- <Current directory>\uidebdksyb.exe
- <Current directory>\gbkaviwbhp.exe
- <Current directory>\kebzllxwuo.exe
- <Current directory>\xwiwxijfec.exe
- <Current directory>\xpuerzeifc.exe
- <Current directory>\arzvnlkazs.exe
- <Current directory>\mcdlekftcr.exe
- <Current directory>\wsicfozsks.exe
- <Current directory>\jlxzrldtto.exe
- <Current directory>\tbcisqxrjo.exe
- <Current directory>\jobeuqkvgb.exe
- <Current directory>\jhxyzsafze.exe
- <Current directory>\wzfulxeojs.exe
- <Current directory>\quixripucd.exe
- <Current directory>\kpmhgcszvo.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\jamrwuiyto.exe'
- '<Current directory>\khbtdeijoq.exe'
- '<Current directory>\upokebuifq.exe'
- '<Current directory>\hqvhqggrof.exe'
- '<Current directory>\uidebdksyb.exe'
- '<Current directory>\gbkaviwbhp.exe'
- '<Current directory>\kebzllxwuo.exe'
- '<Current directory>\xwiwxijfec.exe'
- '<Current directory>\xpuerzeifc.exe'
- '<Current directory>\arzvnlkazs.exe'
- '<Current directory>\mcdlekftcr.exe'
- '<Current directory>\wsicfozsks.exe'
- '<Current directory>\jlxzrldtto.exe'
- '<Current directory>\tbcisqxrjo.exe'
- '<Current directory>\jobeuqkvgb.exe'
- '<Current directory>\jhxyzsafze.exe'
- '<Current directory>\wzfulxeojs.exe'
- '<Current directory>\quixripucd.exe'
- '<Current directory>\kpmhgcszvo.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KPMHGCSZVO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XPUERZEIFC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KHBTDEIJOQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UPOKEBUIFQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HQVHQGGROF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UIDEBDKSYB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GBKAVIWBHP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KEBZLLXWUO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XWIWXIJFEC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XWXKUXNQMR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ARZVNLKAZS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MCDLEKFTCR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WSICFOZSKS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JLXZRLDTTO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TBCISQXRJO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JOBEUQKVGB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JHXYZSAFZE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WZFULXEOJS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JAMRWUIYTO.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QUIXRIPUCD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OWVZNYLQCO.exe"
