Technical Information
Modifies file system
Creates the following files
- <Current directory>\pksifhpqdu.exe
- <Current directory>\fcfqecvamu.exe
- nul
- <Current directory>\julkrbfavy.exe
- <Current directory>\jbwruzpicv.exe
- <Current directory>\ggfswwgnhx.exe
- <Current directory>\dlotgbxkuy.exe
- <Current directory>\jfwkmszwox.exe
- <Current directory>\dzdgdxyqzl.exe
- <Current directory>\xjejxrossw.exe
- <Current directory>\tonchogxfy.exe
- <Current directory>\qahkmjokqx.exe
- <Current directory>\nxrlwofpeg.exe
Deletes the following files
- <Current directory>\pksifhpqdu.exe
- <Current directory>\fcfqecvamu.exe
- <Current directory>\julkrbfavy.exe
- <Current directory>\jbwruzpicv.exe
- <Current directory>\ggfswwgnhx.exe
- <Current directory>\dlotgbxkuy.exe
- <Current directory>\dzdgdxyqzl.exe
- <Current directory>\jfwkmszwox.exe
- <Current directory>\xjejxrossw.exe
- <Current directory>\tonchogxfy.exe
- <Current directory>\qahkmjokqx.exe
Deletes itself.
Miscellaneous
Creates and executes the following
- '<Current directory>\pksifhpqdu.exe'
- '<Current directory>\fcfqecvamu.exe'
- '<Current directory>\julkrbfavy.exe'
- '<Current directory>\jbwruzpicv.exe'
- '<Current directory>\ggfswwgnhx.exe'
- '<Current directory>\dlotgbxkuy.exe'
- '<Current directory>\jfwkmszwox.exe'
- '<Current directory>\dzdgdxyqzl.exe'
- '<Current directory>\xjejxrossw.exe'
- '<Current directory>\tonchogxfy.exe'
- '<Current directory>\qahkmjokqx.exe'
- '<Current directory>\nxrlwofpeg.exe'
Executes the following
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Full path to file>"
- '<SYSTEM32>\ping.exe' 1.1.1.1 -n 1 -w 6000
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\PKSIFHPQDU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\FCFQECVAMU.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JULKRBFAVY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JBWRUZPICV.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\GGFSWWGNHX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DLOTGBXKUY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\JFWKMSZWOX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\DZDGDXYQZL.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\XJEJXROSSW.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\TONCHOGXFY.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\QAHKMJOKQX.exe"
- '<SYSTEM32>\cmd.exe' /C ping 1.1.1.1 -n 1 -w 6000 > Nul & Del "<Current directory>\NXRLWOFPEG.exe"
