Technical Information
Malicious functions:
Removes itself
Stops system services:
- service httpd stop
Manages services:
- service apache2 stop
- systemctl stop apache2.service
- systemctl stop apache2
Network activity:
HTTP GET requests:
- 19#.##.##6.61/d.php?s=started
- sg############hh.onion/api/GetAvailKeysByCampId/10