Technical Information
Malicious functions:
Removes itself
Kills system processes:
- sshd
Performs operations with the file system:
Creates or modifies files:
- /proc/sys/kernel/panic
- /proc/sys/vm/panic_on_oom
Network activity:
Awaits incoming connections on ports:
- 0.0.0.0:5431
- 0.0.0.0:21
- 0.0.0.0:2121
- 0.0.0.0:22
- 0.0.0.0:2222
- 0.0.0.0:23
- 0.0.0.0:2323
Establishes connection:
- 10#.##8.9.17:4369
- 8.#.8.8:0
Sends data to the following servers:
- 10#.##8.9.17:4369
Receives data from the following servers:
- 10#.##8.9.17:4369
