Technical Information
Malicious functions:
Launches processes:
- <SAMPLE_FULL_PATH> \x0a
Network activity:
Establishes connection:
- <LOCAL_DNS_SERVER>
- 8.#.8.8:53
Attacks using a special dictionary (brute-force technique) via the SSH protocol
Sends data to the following servers:
- <LOCAL_DNS_SERVER>
- 8.#.8.8:53
Receives data from the following servers:
- <LOCAL_DNS_SERVER>
- 8.#.8.8:53
