Technical Information
Malicious functions:
Removes itself
Launches processes:
Performs operations with the file system:
Creates folders:
- /usr/share/at
- /usr/share/bash-completion/completions/helpers
- /usr/share/bash-completion/completions/helpers/ssh-pGPGvVPZZ
- /usr/share/bash-completion/completions/helpers/ssh-pGPGvVPZZ/qWVwmSMScoiWCXCN
Creates or modifies files:
- /usr/share/at/batch-job.at
- /usr/share/bash-completion/completions/helpers/ssh-pGPGvVPZZ/qWVwmSMScoiWCXCN/.bashrc
- /usr/share/bash-completion/completions/helpers/ssh-pGPGvVPZZ/sWzhLkpcZujQHd
Network activity:
Establishes connection:
- <LOCAL_DNS_SERVER>
- 0.0.0.0:0
Sends data to the following servers:
- <LOCAL_DNS_SERVER>
Receives data from the following servers:
- <LOCAL_DNS_SERVER>
Other:
Collects CPU information
Collects information about network activity