Technical Information
To ensure autorun and distribution:
Creates or modifies the following files:
- /etc/init.d/rcS
Malicious functions:
Launches processes:
- /bin/sh -c echo Fantasybot on your forehead >> fantasize.txt
Performs operations with the file system:
Creates or modifies files:
- /root/fantasize.txt
Network activity:
Awaits incoming connections on ports:
- 0.0.0.0:17152
Establishes connection:
- 18#.##4.25.200:3134
- 18#.##2.235.56:3134
