Technical Information
Modifies file system
Creates the following files
- <Current directory>\mrrdktkqbr.exe
- <Current directory>\zrkoyvgprd.exe
- <Current directory>\pjxxxrurbd.exe
- nul
- <Current directory>\mvsejmvevc.exe
- <Current directory>\dfeniqknfb.exe
- <Current directory>\txzwplqpxb.exe
- <Current directory>\gmvnymvvuc.exe
- <Current directory>\agkbpicqgq.exe
- <Current directory>\tbrxhfbcre.exe
- <Current directory>\nvglybzxdr.exe
- <Current directory>\avzwnevntd.exe
- <Current directory>\upokebuifq.exe
- <Current directory>\quxloytnks.exe
- <Current directory>\hmkunbzocs.exe
- <Current directory>\rrmylbmkxf.exe
Deletes the following files
- <Current directory>\mrrdktkqbr.exe
- <Current directory>\zrkoyvgprd.exe
- <Current directory>\pjxxxrurbd.exe
- <Current directory>\mvsejmvevc.exe
- <Current directory>\dfeniqknfb.exe
- <Current directory>\gmvnymvvuc.exe
- <Current directory>\txzwplqpxb.exe
- <Current directory>\tbrxhfbcre.exe
- <Current directory>\agkbpicqgq.exe
- <Current directory>\nvglybzxdr.exe
- <Current directory>\avzwnevntd.exe
- <Current directory>\upokebuifq.exe
- <Current directory>\hmkunbzocs.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\mrrdktkqbr.exe'
- '<Current directory>\zrkoyvgprd.exe'
- '<Current directory>\pjxxxrurbd.exe'
- '<Current directory>\mvsejmvevc.exe'
- '<Current directory>\dfeniqknfb.exe'
- '<Current directory>\txzwplqpxb.exe'
- '<Current directory>\gmvnymvvuc.exe'
- '<Current directory>\agkbpicqgq.exe'
- '<Current directory>\tbrxhfbcre.exe'
- '<Current directory>\nvglybzxdr.exe'
- '<Current directory>\avzwnevntd.exe'
- '<Current directory>\upokebuifq.exe'
- '<Current directory>\quxloytnks.exe'
- '<Current directory>\hmkunbzocs.exe'
- '<Current directory>\rrmylbmkxf.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\HMKUNBZOCS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QUXLOYTNKS.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\UPOKEBUIFQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AVZWNEVNTD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NVGLYBZXDR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TBRXHFBCRE.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\AGKBPICQGQ.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GMVNYMVVUC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TXZWPLQPXB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DFENIQKNFB.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MVSEJMVEVC.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PJXXXRURBD.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\ZRKOYVGPRD.exe"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\MRRDKTKQBR.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\RRMYLBMKXF.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\OWVZNYLQCO.exe"
