Technical Information
Malicious functions:
Removes itself
Launches itself as a daemon
Substitutes application name for:
- systemd
- systemd-udevd
Launches processes:
- <SAMPLE_FULL_PATH>
Network activity:
Establishes connection:
- 19#.##1.239.213:21