Trojan.Linux.MALXMR.UWEKV

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Wird möglicherweise von anderer Malware/Grayware/Spyware von externen Sites heruntergeladen.

Übertragungsdetails

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Wird möglicherweise von der folgenden Malware/Grayware/Spyware von externen Sites heruntergeladen:

• Trojan.SH.MALXMR.UWEKB

Andere Details

Es macht Folgendes:

• Serves as the watchdog process that mainly does four things:
  • Check if cron persistence exists and adds if it does not
  • Check if required processes are running and runs them if they are not
  • Check if new versions of the malware are available. Can update the miner, config, scanner, and watchdog binaries
  • Check if the C&C server is active. If the server is not active, this malware looks for a hard-coded address via the Ethereum blockchain explorer then downloads Trojan.SH.MALXMR.UWEKB to start the infection process from the beginning.