Para el funcionamiento correcto del sitio web, debe activar el soporte de JavaScript en su navegador.
Linux.Siggen.6877
Added to the Dr.Web virus database:
2024-03-28
Virus description added:
2024-03-27
Technical Information
To ensure autorun and distribution:
Creates or modifies the following files:
Malicious functions:
Launches processes:
cp -f <SAMPLE_FULL_PATH> /etc/init.d/
cp -f <SAMPLE_FULL_PATH> /etc/init.d/ > /dev/null 2>&1
/tmp/1801tfd5b58975/ms6l2l8623cb08 2>&1 &
/tmp/1801tfd5b58975/ms6l2l8623cb08
Kills the following processes:
Performs operations with the file system:
Modifies file access rights:
/tmp/1801tfd5b58975/ms6l2l8623cb08
Creates folders:
Deletes folders:
/tmp/systemd-private-763a387e9401454caaf087de26cb9a66-systemd-timesyncd.service-wMAnJD/tmp
/tmp/systemd-private-763a387e9401454caaf087de26cb9a66-systemd-timesyncd.service-wMAnJD
/tmp/systemd-private-763a387e9401454caaf087de26cb9a66-logrotate.service-1SR4Gw/tmp
/tmp/systemd-private-763a387e9401454caaf087de26cb9a66-logrotate.service-1SR4Gw
/tmp/.XIM-unix
/tmp/.X11-unix
/tmp/namespace-dev-ZIC0Dn/dev
/tmp/namespace-dev-ZIC0Dn
/tmp/.ICE-unix
/tmp/tmux-0
/tmp/.font-unix
/tmp/.Test-unix
Creates or modifies files:
/tmp/1801tfd5b58975/ms6l2l8623cb08
Deletes files:
Network activity:
Establishes connection:
DNS ASK:
se####.#ystemupdatecdn.de
Sends data to the following servers:
Receives data from the following servers:
Curing recommendations
Linux
Free trial
One month (no registration) or three months (registration and renewal discount)
Descargue Dr.Web para Android
Gratis por 3 meses
Todos los componentes de protección
Renovación de la demo a través de AppGallery/Google Pay
Si Vd. continúa usando este sitio web, esto significa que Vd. acepta el uso de archivos Cookie y otras tecnologías para que recabemos las estadísticas sobre los visitantes. Más información
OK