Technical Information
Malicious functions:
Launches itself as a daemon
Kills system processes:
- sshd
Performs operations with the file system:
Creates or modifies files:
- /tmp/TeamViewer13_Logfile.log
- /var/run/teamviewerd.pid
- /run/teamviewerd.pid
- /var/run/teamviewerd.ipc
- /run/teamviewerd.ipc
- /root/config/global.conf
Network activity:
Awaits incoming connections on ports:
- 127.0.0.1:5939
Other:
Collects OS information
Collects CPU information