Technical Information
Malicious functions:
Gains root privileges
Launches itself as a daemon
Launches processes:
- /bin/bash
Kills the following processes:
- <SAMPLE>
Performs operations with the file system:
Modifies file access rights:
- /tmp/screens/S-root/519.pts-0.debian
- /dev/pts/0
- /dev/pts/1
Modifies file owner:
- /tmp/screens/S-root
- /dev/pts/1
Creates folders:
- /tmp/screens
- /tmp/screens/S-root
Creates or modifies files:
- /dev/pts/0
- /dev/pts/1
