Technical Information
Malicious functions:
Launches processes:
- sh -c /var/tmp/hdd clfo &
- /var/tmp/hdd clfo
- sh -c /tmp/hdd xvec &
- /tmp/hdd xvec
Kills system processes:
- sshd
Kills the following processes:
- cron
- atd
- bash
Performs operations with the file system:
Modifies file access rights:
- /var/tmp/hdd
- /tmp/hdd
Creates or modifies files:
- /var/tmp/hdd
- /tmp/hdd
Network activity:
HTTP GET requests:
- 18#.##.68.100/jp/dld