Technical Information
To ensure autorun and distribution:
Creates or modifies the following files:
- /etc/rc.d/rc.local
Malicious functions:
Launches itself as a daemon
Performs operations with the file system:
Creates or modifies files:
- /proc/meminfo
- /proc/cpuinfo
- /proc/net/dev
- /proc/stat
Network activity:
Establishes connection:
- 27.###.148.135:8998
Sends data to the following servers:
- 27.###.148.135:8998
Other:
Collects CPU information
Collects RAM information
Collects information about network activity