Technical Information
Malicious functions:
Removes itself
Manages services:
- ['systemctl', 'stop', 'system-daemon.service']
- ['systemctl', 'disable', 'system-daemon.service']
- ['systemctl', '--version']
- ['systemctl', 'enable', 'system-daemon.service']
- ['systemctl', 'daemon-reload']
- ['systemctl', 'start', 'system-daemon.service']
Launches processes:
- /usr/lib/accountsservice/system-daemon fd9de7ac314ecf02f71af558781cd9f9
Performs operations with the file system:
Creates folders:
- /usr/lib/accountsservice
Creates or modifies files:
- /usr/lib/accountsservice/system-daemon
- /etc/systemd/system/system-daemon.service
Changes time of creation/access/modification of files:
- /usr/lib/accountsservice/system-daemon