Technical Information
Modifies file system
Creates the following files
- <Current directory>\mqqlwfoddp.exe
- <Current directory>\zyjocakcua.exe
- <Current directory>\jvhmycgiry.exe
- nul
- <Current directory>\wcspmxbzhc.exe
- <Current directory>\jclsbaxyxo.exe
- <Current directory>\cmlnvufapz.exe
- <Current directory>\plwqbxbrgk.exe
- <Current directory>\dtpbpsxqwo.exe
- <Current directory>\zyyuzponby.exe
- <Current directory>\auupxlhspl.exe
- <Current directory>\wrerhqhpcm.exe
- <Current directory>\njrzglnzmm.exe
- <Current directory>\gegnxiulxz.exe
- <Current directory>\xoseelavpz.exe
- <Current directory>\kdwnnefcma.exe
Deletes the following files
- <Current directory>\mqqlwfoddp.exe
- <Current directory>\zyjocakcua.exe
- <Current directory>\jvhmycgiry.exe
- <Current directory>\wcspmxbzhc.exe
- <Current directory>\jclsbaxyxo.exe
- <Current directory>\cmlnvufapz.exe
- <Current directory>\plwqbxbrgk.exe
- <Current directory>\dtpbpsxqwo.exe
- <Current directory>\zyyuzponby.exe
- <Current directory>\auupxlhspl.exe
- <Current directory>\wrerhqhpcm.exe
- <Current directory>\njrzglnzmm.exe
- <Current directory>\gegnxiulxz.exe
- <Current directory>\xoseelavpz.exe
- <Current directory>\kdwnnefcma.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\mqqlwfoddp.exe'
- '<Current directory>\zyjocakcua.exe'
- '<Current directory>\jvhmycgiry.exe'
- '<Current directory>\wcspmxbzhc.exe'
- '<Current directory>\jclsbaxyxo.exe'
- '<Current directory>\cmlnvufapz.exe'
- '<Current directory>\plwqbxbrgk.exe'
- '<Current directory>\dtpbpsxqwo.exe'
- '<Current directory>\zyyuzponby.exe'
- '<Current directory>\auupxlhspl.exe'
- '<Current directory>\wrerhqhpcm.exe'
- '<Current directory>\njrzglnzmm.exe'
- '<Current directory>\gegnxiulxz.exe'
- '<Current directory>\xoseelavpz.exe'
- '<Current directory>\kdwnnefcma.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\KDWNNEFCMA.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XOSEELAVPZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GEGNXIULXZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NJRZGLNZMM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WRERHQHPCM.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AUUPXLHSPL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZYYUZPONBY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ACVCOGDTDX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DTPBPSXQWO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\CMLNVUFAPZ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JCLSBAXYXO.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\WCSPMXBZHC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JVHMYCGIRY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZYJOCAKCUA.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MQQLWFODDP.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PLWQBXBRGK.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\BJYRJENJKN.exe"
