Known as Perfctl https://arstechnica.com/security/20...ux-malware-has-infected-thousands-since-2021/ Sounds like a tough one to beat.
Thank you, @stapp md5 hash to a related malware file: 656e22c65bf7c04d87b5afbe52b8d800 A well crafted YARA rule may be a helpful defense. https://www.aquasec.com/blog/perfctl-a-stealthy-malware-targeting-millions-of-linux-servers/ HTH
