Good job on finding that thing in the disk image. We have been locked out of one of our other servers and we suspect they were compsomised by the same attacker. Can you try to regain access to it. Note: The service can be found in "XYZ: Part 1"