ELF_DNSAMP.B
ALIASES:
Backdoor.Spikeddos (Symantec); Trojan.Linux.DDoS (Ikarus);
PLATFORM:
Linux
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
INFORMATION EXPOSURE:
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
It performs denial of service (DoS) attacks on affected systems using specific flooding method(s).
TECHNICAL DETAILS
File Size:
204748 bytes
File Type:
ELF
Initial Samples Received Date:
04 Jun 2015
Arrival Details
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Installation
This Trojan drops the following copies of itself into the affected system and executes them:
- /etc/.misys
Denial of Service (DoS) Attack
This Trojan performs denial of service (DoS) attacks on affected systems using the following flooding method(s):
- UDP Flood
- DNS Flood
- SYN Flood
- GET Flood
- ICMP Flood