Technical Information
To ensure autorun and distribution:
Creates or modifies the following files:
- /etc/rc.local
Malicious functions:
Gains root privileges
Substitutes application name for:
- 5a22gRSL7tKp
Network activity:
Establishes connection:
- 94.##.40.220:4321
- 20.##.130.140:9160
- 13#.##9.230.13:8080
- 11#.###.210.124:9191
- 51.###.185.181:9160
- 13#.##3.56.117:9051