Technical Information
Malicious functions:
Launches processes:
- sh -c uname -r >/tmp/ibm_ux_pkg_uname.txt 2>/dev/null
- uname -r
- sh -c uname -a >/tmp/ibm_ux_pkg_uname.txt 2>/dev/null
- uname -a
- sh -c mkdir -p \"/tmp/ibm_ux_pkg_000002ac\"
- mkdir -p /tmp/ibm_ux_pkg_000002ac
- sh -c ./miniunz image.zip > /dev/null
- ./miniunz image.zip
- /bin/sh ./miniunz image.zip
- sh -c rm -rf \"/tmp/ibm_ux_pkg_000002ac\"
- rm -rf /tmp/ibm_ux_pkg_000002ac
Performs operations with the file system:
Modifies file access rights:
- /tmp/ibm_ux_pkg_000002ac/image.tar
- /tmp/ibm_ux_pkg_000002ac/image.zip
- /tmp/ibm_ux_pkg_000002ac/miniunz
Creates folders:
- /tmp/ibm_ux_pkg_000002ac
Creates or modifies files:
- /tmp/ibm_ux_pkg_uname.txt
- /tmp/ibm_ux_pkg_000002ac"/image.tar
- /tmp/ibm_ux_pkg_000002ac"/image.zip
- /tmp/ibm_ux_pkg_000002ac"/miniunz
Deletes files:
- /tmp/ibm_ux_pkg_uname.txt"
- /tmp"/image.zip"
- /tmp"/miniunz"
- /tmp"/image.tar"