Technical Information
Malicious functions:
Launches itself as a daemon
Launches processes:
- sh -c rm -f /var/cache/cuxd/*.out
- rm -f /var/cache/cuxd/*.out
Performs operations with the file system:
Creates folders:
- /var/cache/cuxd
Creates or modifies files:
- /var/run/cuxd.pid
- /run/cuxd.pid
- /root/cuxd.ini
- /var/cache/cuxd_params.ini
- /var/cache/cuxd_proxy.ini
- /usr/local/etc/config/InterfacesList.xml
- /tmp/cuxd.ps.sav
Deletes files:
- /var/cache/cuxd/*.out
Network activity:
Awaits incoming connections on ports:
- 0.0.0.0:8700
- 0.0.0.0:8701
Other:
Collects RAM information
Collects information about network activity