Dr. Web states that:
“This malware possesses the ability to collect information about an infected computer and transfer it to the C&C server, download and launch a crypto-currency mining utility, and attack other computers on the network to install its own copy on them.”
The main purpose of this malware is to convert computers that use Linux into crypto-currency generators. It basically performs three key functions;
* It gains information about an infected computer and sends it to the C&C server (command and control)
* It downloads and launches a crypto-currency mining program after receiving a configuration file from the C&C server
* Searches for other computers on the network to install another copy of the cryptocurrency miner program and looks for Monero, a type of cryptocurrency
https://www.hackread.com/linux-malware-bitcoin-mining-software/