Backdoor.Linux.NOODLERAT.A

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Übertragungsdetails

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Andere Details

Es macht Folgendes:

• It is used to interact with Microsoft SQL Server for command execution, file transfer, and assembly management.
• It performs the following:
  • Execute commands via xp_cmdshell, sp_oacreate, and CLR assemblies.
  • Upload and download files using OLE automation.
  • Create and execute CLR assemblies within SQL Server.
  • Enable or disable xp_cmdshell and OLE automation procedures.
  • List running processes and perform network statistics checks.
  • Supports interactive and non-interactive modes.
  • Load and execute shellcode on the target system.