Technical Information
Malicious functions:
Removes itself
Launches processes:
Performs operations with the file system:
Creates folders:
- /usr/share/at
- /usr/share/bash-completion/completions/helpers
- /usr/share/bash-completion/completions/helpers/ssh-LdIAdlsr
- /usr/share/bash-completion/completions/helpers/ssh-LdIAdlsr/qNtExDaHrFjqZhjPGm
Creates or modifies files:
- /usr/share/at/batch-job.at
- /usr/share/bash-completion/completions/helpers/ssh-LdIAdlsr/qNtExDaHrFjqZhjPGm/.bashrc
- /usr/share/bash-completion/completions/helpers/ssh-LdIAdlsr/sWVxJnjKUVNZHEXyi
Network activity:
Awaits incoming connections on ports:
- 0.0.0.0:35394
Establishes connection:
- 127.0.0.1:9
- [:#1]:9
- [:##]:64830
- 127.0.0.1:64830
- 127.0.0.1:32936
Other:
Collects CPU information
Collects information about network activity