Technical Information
Modifies file system
Creates the following files
- <Current directory>\uxflaiivrm.exe
- <Current directory>\czqfkutkiy.exe
- <Current directory>\fuzeapcfdo.exe
- <Current directory>\snobtugonc.exe
- <Current directory>\yszfcxhubp.exe
- <Current directory>\eykjctbiqb.exe
- <Current directory>\itbqawjdda.exe
- <Current directory>\ozmujadqrm.exe
- <Current directory>\bztrvxprba.exe
- <Current directory>\sjdorqzmsp.exe
- <Current directory>\orjogctakp.exe
- <Current directory>\hpbpbczpjp.exe
- <Current directory>\rfogchkozq.exe
- <Current directory>\xlzkkcmtnc.exe
- <Current directory>\eqkwtgnhco.exe
- <Current directory>\nyxgmkzxkp.exe
- nul
- <Current directory>\ebhqqivrvz.exe
- <Current directory>\duvbwkmbob.exe
- <Current directory>\bkqkszxkul.exe
- <Current directory>\frwrxsvljb.exe
Deletes the following files
- <Current directory>\uxflaiivrm.exe
- <Current directory>\czqfkutkiy.exe
- <Current directory>\fuzeapcfdo.exe
- <Current directory>\snobtugonc.exe
- <Current directory>\eykjctbiqb.exe
- <Current directory>\yszfcxhubp.exe
- <Current directory>\itbqawjdda.exe
- <Current directory>\ozmujadqrm.exe
- <Current directory>\bztrvxprba.exe
- <Current directory>\bkqkszxkul.exe
- <Current directory>\orjogctakp.exe
- <Current directory>\hpbpbczpjp.exe
- <Current directory>\xlzkkcmtnc.exe
- <Current directory>\rfogchkozq.exe
- <Current directory>\eqkwtgnhco.exe
- <Current directory>\nyxgmkzxkp.exe
- <Current directory>\ebhqqivrvz.exe
- <Current directory>\duvbwkmbob.exe
- <Current directory>\sjdorqzmsp.exe
- <Current directory>\frwrxsvljb.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\uxflaiivrm.exe'
- '<Current directory>\czqfkutkiy.exe'
- '<Current directory>\fuzeapcfdo.exe'
- '<Current directory>\snobtugonc.exe'
- '<Current directory>\yszfcxhubp.exe'
- '<Current directory>\eykjctbiqb.exe'
- '<Current directory>\itbqawjdda.exe'
- '<Current directory>\ozmujadqrm.exe'
- '<Current directory>\bztrvxprba.exe'
- '<Current directory>\orjogctakp.exe'
- '<Current directory>\bkqkszxkul.exe'
- '<Current directory>\hpbpbczpjp.exe'
- '<Current directory>\rfogchkozq.exe'
- '<Current directory>\xlzkkcmtnc.exe'
- '<Current directory>\eqkwtgnhco.exe'
- '<Current directory>\nyxgmkzxkp.exe'
- '<Current directory>\ebhqqivrvz.exe'
- '<Current directory>\duvbwkmbob.exe'
- '<Current directory>\sjdorqzmsp.exe'
- '<Current directory>\frwrxsvljb.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FYZYZQFTPY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\VBIAEOJMBB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FRWRXSVLJB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SJDORQZMSP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CZQFKUTKIY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FUZEAPCFDO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SNOBTUGONC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\YSZFCXHUBP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EYKJCTBIQB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ITBQAWJDDA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OZMUJADQRM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BZTRVXPRBA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ORJOGCTAKP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BKQKSZXKUL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HPBPBCZPJP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RFOGCHKOZQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XLZKKCMTNC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EQKWTGNHCO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NYXGMKZXKP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\EBHQQIVRVZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DUVBWKMBOB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UXFLAIIVRM.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\SGSBOLASGC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FFKEUOWIWO.exe"
