Technical Information
Malicious functions:
Removes itself
Launches itself as a daemon
Substitutes application name for:
- tracepath
Launches processes:
- sh -c
- base64 -d
Performs operations with the file system:
Creates or modifies files:
- /tmp/SimpleApp.jar
- /tmp/.X1-lock