La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Linux.Siggen.6454

Aggiunto al database dei virus Dr.Web: 2024-01-19

La descrizione è stata aggiunta:

Technical Information

To ensure autorun and distribution:
Creates or modifies the following files:
  • /etc/crontab
  • /etc/cron.hourly/system.sh
Malicious functions:
Launches itself as a daemon
Performs operations with the file system:
Modifies file access rights:
  • /etc/crontab
  • /etc/cron.hourly/system.sh
Creates or modifies files:
  • <SAMPLE_FULL_PATH>
  • /tmp/X05AGE3LHeNYwRAyWcHzhdkNEXvMU
  • /usr/bin/wget
  • /usr/bin/passwd
  • /tmp/KUrAPrFTjOYDbvxsvlCMq2tKa4Mwq
  • /tmp/ZG0twy8d1PCGoDhZ0OIcOUGEBOf6b
  • /tmp/Rm0VahHOdjEsjKUnprd1y3GI8KIMp
  • /tmp/En4obOE8TQZ2UIccaDIGg94YFAWOI
Network activity:
Establishes connection:
  • 16#.#.59.40:448
Sends data to the following servers:
  • 16#.#.59.40:448
Receives data from the following servers:
  • 16#.#.59.40:448

Curing recommendations


Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

One month (no registration) or three months (registration and renewal discount)

Download Dr.Web

Download by serial number