Technical Information
Malicious functions:
Launches processes:
- systemd-detect-virt
Performs operations with the file system:
Modifies file access rights:
- /run/domtime
- /var/opt/domtime
- /opt/domtime/archives
- /opt/domtime/packages
- /tmp/domtime
Creates folders:
- /domtime
- /var/opt/domtime
- /opt/domtime
- /opt/domtime/archives
- /opt/domtime/packages
- /tmp/domtime
Creates symlinks:
- /usr/bin/dtlinux
- /usr/bin/dtcheck
- /usr/bin/dtlinux-update
- /opt/domtime/LICENSE.txt
Creates or modifies files:
- /var/run/domtime/dtlinux.pid
- /run/domtime/dtlinux.pid
- /tmp/domtime/virt.tmp
Deletes files:
- /tmp/domtime/~template
- /opt/domtime/etc/~tmp
- /opt/domtime/~tmp
- /tmp/domtime/!info.txt
- /tmp/domtime/ptpmasters.txt
- /var/opt/domtime/dtlinux.dat.tmp
- /etc/opt/domtime/~tmp
- /tmp/domtime/adapters.bin
- /tmp/domtime/service-status.txt
- /tmp/domtime/virt.tmp
- /tmp/domtime/ClientSettings.zip
- /opt/domtime/LICENSE.txt
- /root/
Locks files:
- /run/domtime/dtlinux.pid
Other:
Collects CPU information