Technical Information
Malicious functions:
Removes itself
Manages services:
- systemctl enable systemd-agent.service
- systemctl start systemd-agent.service
Launches processes:
- sh -c (which semanage) >/dev/null 2>&1
- which semanage
- sh -c (systemctl enable systemd-agent.service) >/dev/null 2>&1
- sh -c (systemctl start systemd-agent.service) >/dev/null 2>&1
Performs operations with the file system:
Modifies file access rights:
- /usr/lib/systemd/systemd-daemon
Creates or modifies files:
- /usr/lib/systemd/systemd-daemon
- /lib/systemd/system/systemd-agent.service