Technical Information
Malicious functions:
Removes itself
Launches itself as a daemon
Substitutes application name for:
- 28i24lk24gf2n5i206chf62jaq43mmieebq0ohcu5j1uuw
Performs operations with the file system:
Creates or modifies files:
- /proc/532/oom_score_adj
- /proc/532/oom_adj
Locks files:
- /tmp/tmp.lck
Network activity:
Establishes connection:
- 18#.##8.46.242:8080
Sends data to the following servers:
- 8.##.56.26:53