Linux.Siggen.6265

Техническая информация

Вредоносные функции:

Подменяет имя приложения на:

<SAMPLE>

Запускает процессы:

Выполняет операции с файловой системой:

Модифицирует права доступа к файлам:

/tmp/_MEItsE02F/_asyncio.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_bz2.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_codecs_cn.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_codecs_hk.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_codecs_iso2022.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_codecs_jp.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_codecs_kr.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_codecs_tw.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_contextvars.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_ctypes.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_decimal.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_hashlib.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_lzma.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_multibytecodec.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_multiprocessing.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_opcode.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_posixshmem.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_queue.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_ssl.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/libbz2.so.1.0
/tmp/_MEItsE02F/libcrypto.so.1.1
/tmp/_MEItsE02F/libexpat.so.1
/tmp/_MEItsE02F/libffi.so.7
/tmp/_MEItsE02F/liblzma.so.5
/tmp/_MEItsE02F/libmpdec.so.2
/tmp/_MEItsE02F/libpython3.8.so.1.0
/tmp/_MEItsE02F/libreadline.so.8
/tmp/_MEItsE02F/libssl.so.1.1
/tmp/_MEItsE02F/libtinfo.so.6
/tmp/_MEItsE02F/libz.so.1
/tmp/_MEItsE02F/mmap.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/readline.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/resource.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/termios.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/base_library.zip
/tmp/_MEItsE02F/include/python3.8/pyconfig.h
/tmp/_MEItsE02F/lib/python3.8/config-3.8-x86_64-linux-gnu/Makefile

Создает папки:

/tmp/_MEItsE02F
/tmp/_MEItsE02F/include
/tmp/_MEItsE02F/include/python3.8
/tmp/_MEItsE02F/lib
/tmp/_MEItsE02F/lib/python3.8
/tmp/_MEItsE02F/lib/python3.8/config-3.8-x86_64-linux-gnu

Удаляет папки:

/tmp/_MEItsE02F/include/python3.8
/tmp/_MEItsE02F/include
/tmp/_MEItsE02F/lib/python3.8/config-3.8-x86_64-linux-gnu
/tmp/_MEItsE02F/lib/python3.8
/tmp/_MEItsE02F/lib
/tmp/_MEItsE02F

Создает или модифицирует файлы:

/tmp/_MEItsE02F/_asyncio.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_bz2.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_codecs_cn.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_codecs_hk.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_codecs_iso2022.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_codecs_jp.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_codecs_kr.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_codecs_tw.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_contextvars.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_ctypes.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_decimal.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_hashlib.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_lzma.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_multibytecodec.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_multiprocessing.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_opcode.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_posixshmem.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_queue.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_ssl.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/libbz2.so.1.0
/tmp/_MEItsE02F/libcrypto.so.1.1
/tmp/_MEItsE02F/libexpat.so.1
/tmp/_MEItsE02F/libffi.so.7
/tmp/_MEItsE02F/liblzma.so.5
/tmp/_MEItsE02F/libmpdec.so.2
/tmp/_MEItsE02F/libpython3.8.so.1.0
/tmp/_MEItsE02F/libreadline.so.8
/tmp/_MEItsE02F/libssl.so.1.1
/tmp/_MEItsE02F/libtinfo.so.6
/tmp/_MEItsE02F/libz.so.1
/tmp/_MEItsE02F/mmap.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/readline.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/resource.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/termios.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/base_library.zip
/tmp/_MEItsE02F/include/python3.8/pyconfig.h
/tmp/_MEItsE02F/lib/python3.8/config-3.8-x86_64-linux-gnu/Makefile

Удаляет файлы:

/tmp/_MEItsE02F/_codecs_tw.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/mmap.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_lzma.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_posixshmem.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_multiprocessing.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_hashlib.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/libffi.so.7
/tmp/_MEItsE02F/liblzma.so.5
/tmp/_MEItsE02F/_codecs_kr.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_asyncio.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/libtinfo.so.6
/tmp/_MEItsE02F/include/python3.8/pyconfig.h
/tmp/_MEItsE02F/termios.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/libexpat.so.1
/tmp/_MEItsE02F/_queue.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_codecs_cn.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_bz2.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_codecs_jp.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_multibytecodec.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/libreadline.so.8
/tmp/_MEItsE02F/_ssl.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_opcode.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/lib/python3.8/config-3.8-x86_64-linux-gnu/Makefile
/tmp/_MEItsE02F/libz.so.1
/tmp/_MEItsE02F/libcrypto.so.1.1
/tmp/_MEItsE02F/libmpdec.so.2
/tmp/_MEItsE02F/_codecs_iso2022.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_decimal.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/base_library.zip
/tmp/_MEItsE02F/_codecs_hk.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/_ctypes.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/libbz2.so.1.0
/tmp/_MEItsE02F/_contextvars.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/libssl.so.1.1
/tmp/_MEItsE02F/libpython3.8.so.1.0
/tmp/_MEItsE02F/resource.cpython-38-x86_64-linux-gnu.so
/tmp/_MEItsE02F/readline.cpython-38-x86_64-linux-gnu.so

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению