Technical Information
Malicious functions:
Removes itself
Manages services:
- systemctl daemon-reload
- systemctl enable uplugplay.service
- systemctl start uplugplay.service
Launches processes:
- sh -c systemctl daemon-reload
- sh -c systemctl enable uplugplay.service
- sh -c systemctl start uplugplay.service
Performs operations with the file system:
Modifies file access rights:
- /usr/sbin/uplugplay
Creates or modifies files:
- /etc/hosts
- /usr/sbin/uplugplay
- /lib/systemd/system/uplugplay.service