La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Linux.Siggen.6259

Aggiunto al database dei virus Dr.Web: 2023-12-20

La descrizione è stata aggiunta:

Technical Information

To ensure autorun and distribution:
Creates or modifies the following files:
  • /var/spool/cron/crontabs/root
Malicious functions:
Launches itself as a daemon
Launches processes:
  • bash -c echo \x22* * * * * <SAMPLE_FULL_PATH>\x22 | /usr/bin/crontab -
  • /usr/bin/crontab -
  • <SAMPLE_FULL_PATH> {70d0be7374677265733a207265706c69636174696f6e206c61756e63686572}
  • /usr/bin/crontab
  • bash -c /usr/bin/crontab -r
  • mount
Performs operations with the file system:
Modifies file access rights:
  • /var/spool/cron/crontabs/tmp.ZMVPgx
  • /var/spool/cron/crontabs/tmp.gLIDO4
Creates or modifies files:
  • /tmp/.private-fAUZbhy7B45fgmk1Gqci-login.service-S90agO
  • /tmp/.private-YO1lKF399NbEEUQUNDMl-login.service-CgeHDZ
  • /tmp/.sh_history
  • /var/spool/cron/crontabs/tmp.ZMVPgx
  • /var/spool/cron/crontabs/tmp.gLIDO4
Locks files:
  • /tmp/.private-fAUZbhy7B45fgmk1Gqci-login.service-S90agO
Changes time of creation/access/modification of files:
  • /var/spool/cron/crontabs
Other:
Collects CPU information
Collects information about network activity

Curing recommendations


Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

One month (no registration) or three months (registration and renewal discount)

Download Dr.Web

Download by serial number