Technical Information
Malicious functions:
Substitutes application name for:
- cloakcoin-wallet
- cloakcoin-start
- cloakcoin-ext-ip
- cloakcoin-dnsseed
- cloakcoin-net
- cloakcoin-onionseed
- cloakcoin-opencon
- cloakcoin-msghand
- cloakcoin-adrdump
- cloakcoin-enigmaann
- cloakcoin-rpclist
- cloakcoin-miner
Performs operations with the file system:
Creates folders:
- /root/.CloakCoin
- /root/.CloakCoin/database
- /root/.CloakCoin/txleveldb
Creates or modifies files:
- /root/.CloakCoin/.lock
- /root/.CloakCoin/debug.log
- /root/.CloakCoin/db.log
- /root/.CloakCoin/txleveldb/LOG
- /root/.CloakCoin/txleveldb/LOCK
- /root/.CloakCoin/txleveldb/MANIFEST-000001
- /root/.CloakCoin/txleveldb/000001.dbtmp
- /root/.CloakCoin/txleveldb/000003.log
- /root/.CloakCoin/txleveldb/MANIFEST-000002
- /root/.CloakCoin/txleveldb/000002.dbtmp
- /root/.CloakCoin/blk0001.dat
- /root/.CloakCoin/database/log.0000000001
- /root/.CloakCoin/__db.80000001.635dc0a9
- /root/.CloakCoin/wallet.dat
- /root/.CloakCoin/peers.dat.0665
Deletes files:
- /root/.CloakCoin/txleveldb/MANIFEST-000001"
Network activity:
Awaits incoming connections on ports:
- 0.0.0.0:29662
Establishes connection:
- 91.##8.22.70:80
Other:
Collects CPU information