Technical Information
Malicious functions:
Removes itself
Substitutes application name for:
- rFi5SLE5Eo6Zb5QSW6ES426SlS5l
Network activity:
Establishes connection:
- 16#.##.117.178:979
Sends data to the following servers:
- 12#.##.188.209:53
Receives data from the following servers:
- 16#.##.117.178:979