Technical Information
Malicious functions:
Removes itself
Launches processes:
Performs operations with the file system:
Creates folders:
- /usr/share/at
- /usr/share/bash-completion/completions/helpers
- /usr/share/bash-completion/completions/helpers/ssh-QTzjHs
- /usr/share/bash-completion/completions/helpers/ssh-QTzjHs/jVejXTrsQeJJz
Creates or modifies files:
- /usr/share/at/batch-job.at
- /usr/share/bash-completion/completions/helpers/ssh-QTzjHs/jVejXTrsQeJJz/.bashrc
- /usr/share/bash-completion/completions/helpers/ssh-QTzjHs/Aixq
Network activity:
Awaits incoming connections on ports:
- 0.0.0.0:50151
Establishes connection:
- 8.#.8.8:53
- 127.0.0.1:53875
Sends data to the following servers:
- 8.#.8.8:53
Receives data from the following servers:
- 8.#.8.8:53
Other:
Collects CPU information
Collects information about network activity