Technical Information
Malicious functions:
Launches processes:
- /usr/bin/python3.9 /usr/bin/python3 -Es /usr/bin/lsb_release
Kills the following processes:
- python3.9
Performs operations with the file system:
Creates folders:
- /tmp/.ICEd-unix
- /var/tmp/.ICEd-unix
- /.ICEd-unix
Creates or modifies files:
- /run/lock/linux.lock
- /tmp/.ICEd-unix/uuid
- /usr/lib/python3/dist-packages/__pycache__/lsb_release.cpython-39.pyc.281473246793904
Other:
Collects CPU information
Collects RAM information
Collects information about network activity