Technical Information
Malicious functions:
Performs process tracing:
- sshd
Removes the following system files:
- /usr/bin/mainpasteheader1
- /usr/bin/libsshd.so
- /usr/bin/recoverpasteheader
Performs operations with the file system:
Modifies file access rights:
- /usr/bin/recoverpasteheader1
- /usr/bin/ls
- /usr/bin/mainpasteheader1
- /usr/sbin/cron1
Creates or modifies files:
- <SAMPLE_FULL_PATH>
- /usr/bin/recoverpasteheader
- /usr/bin/mainpasteheader
- /usr/bin/recoverpasteheader1
- /usr/bin/mainpasteheader1
- /usr/bin/ls
- /usr/bin/libsshd.so
- /usr/sbin/cron1
- <SAMPLE_FULL_PATH>1