Although researchers found samples only for Linux, the malware is able to determine the operating system the vulnerable service is running on, and deliver the appropriate payload.