Technical Information
To ensure autorun and distribution:
Creates or modifies the following files:
- /etc/rc.local
Malicious functions:
Gains root privileges
Substitutes application name for:
- 5Iui2OYWpLqr
Kills the following processes:
- exim4
Network activity:
Establishes connection:
- 95.###.163.1:8010
- 20.##.147.137:9160
- 5.###.80.141:2002
- 15#.##.203.65:9999
- 45.##.225.67:8054