OSX/Bckdr-RLG calls home to 2012 . slyip .net.
It creates the file /Library/LaunchAgents/com.apple.DocActions.plist.
OSX/Bckdr-RLG has the ability to upload data, download files and execute remote commands.
Examples of OSX/Bckdr-RLG include:
Example 1
File Information
- Size
- 1.1M
- SHA-1
- 1e761b6e1500e9d3f142ddaea11e24797a14034e
- MD5
- 2c393608bb5733a7a9bba843431bd03b
- CRC-32
- 73e34eda
- File type
- PK ZIP archive
- First seen
- 2012-06-18
Example 2
File Information
- Size
- 1.1M
- SHA-1
- 24b3ba59d9d479198d98f2889b53458df3a3a28a
- MD5
- 999ce02b11ec3261860ad204228a33db
- CRC-32
- dd161f5e
- File type
- PK ZIP archive
- First seen
- 2012-06-18
Example 3
File Information
- Size
- 90K
- SHA-1
- 54e006b3972a7939df7727289fe0def3448bf0f8
- MD5
- 4f138650600923b6abceeb3f165f27c5
- CRC-32
- a301da9d
- File type
- Unspecified binary - probably data
- First seen
- 2012-03-30