Technical Information
To ensure autorun and distribution:
Creates or modifies the following files:
- /etc/rc.local
Malicious functions:
Launches itself as a daemon
Launches processes:
- sh -c ulimit -HSn 65536
Performs operations with the file system:
Creates or modifies files:
- /etc/sysctl.conf
Network activity:
Awaits incoming connections on ports:
- 0.0.0.0:47895
DNS ASK:
- qf##20.top
Other:
Collects information about network activity