Linux.Siggen.6383

Technical Information

Malicious functions:

Removes itself

Gets access to SSH keys

/root/.ssh/authorized_keys
/root/.ssh/known_hosts

Launches processes:

gzip -cd /var/log/auth*
cat /root/.ssh/known_hosts
free -h
id -n -u 0
journalctl -S @0 -u sshd
cat /var/log/auth*
cat /etc/issue
/bin/sh -
/bin/sh /usr/bin/zcat /var/log/auth*
chattr +ia /root/.ssh/authorized_keys
chattr -ia /root/.ssh/authorized_keys
grep -E (scp|ssh)
uptime
whoami
uname -a
id -n -u 104
cat /proc/cpuinfo

Performs operations with the file system:

Creates folders:

/root/.ssh

Network activity:

Establishes connection:

<LOCAL_DNS_SERVER>
0.0.0.0:1234
<LOCAL_GATE>17:80
19#.##8.217.202:80
19#.##8.217.85:80
<LOCAL_GATE>13:80
19#.##8.217.79:80
<LOCAL_GATE>07:80
<LOCAL_GATE>62:80
19#.##8.217.216:80
19#.##8.217.238:80
19#.##8.217.26:80
19#.##8.217.38:80
<LOCAL_GATE>46:80
19#.##8.217.225:80
19#.##8.217.35:80
<LOCAL_GATE>21:80
19#.##8.217.33:80
19#.##8.217.228:80
19#.##8.217.235:80
<LOCAL_GATE>44:80
<LOCAL_GATE>91:80
<LOCAL_GATE>0:80
<LOCAL_GATE>76:80
<LOCAL_GATE>81:80
19#.##8.217.227:80
<LOCAL_GATE>26:80
19#.##8.217.88:80
19#.##8.217.95:80
<LOCAL_GATE>04:80
<LOCAL_GATE>40:80
19#.##8.217.6:80
19#.##8.217.41:80
19#.##8.217.23:80
19#.##8.217.24:80
<LOCAL_GATE>53:80
<LOCAL_GATE>72:80
<LOCAL_GATE>74:80
19#.##8.217.236:80
19#.##8.217.80:80
19#.##8.217.98:80
<LOCAL_GATE>31:80
<LOCAL_GATE>49:80
<LOCAL_GATE>51:80
<LOCAL_GATE>63:80
19#.##8.217.204:80
19#.##8.217.217:80
19#.##8.217.242:80
<LOCAL_GATE>03:80
<LOCAL_GATE>11:80
<LOCAL_GATE>06:80
<LOCAL_GATE>29:80
<LOCAL_GATE>33:80
19#.##8.217.233:80
19#.##8.217.248:80
19#.##8.217.20:80
19#.##8.217.70:80
19#.##8.217.84:80
<LOCAL_GATE>9:80
19#.##8.217.63:80
<LOCAL_GATE>65:80
19#.##8.217.231:80
19#.##8.217.49:80
<LOCAL_GATE>73:80
19#.##8.217.224:80
19#.##8.217.52:80
<LOCAL_GATE>64:80
<LOCAL_GATE>15:80
19#.##8.217.8:80
19#.##8.217.50:80
19#.##8.217.62:80
<LOCAL_GATE>35:80
19#.##8.217.4:80
19#.##8.217.34:80
<LOCAL_GATE>16:80
<LOCAL_GATE>58:80
<LOCAL_GATE>41:80
19#.##8.217.239:80
19#.##8.217.91:80
<LOCAL_GATE>36:80
<LOCAL_GATE>67:80
19#.##8.217.241:80
19#.##8.217.87:80
<LOCAL_GATE>77:80
19#.##8.217.209:80
19#.##8.217.48:80
<LOCAL_GATE>59:80
<LOCAL_GATE>71:80
19#.##8.217.60:80
<LOCAL_GATE>68:80
19#.##8.217.252:80
<LOCAL_GATE>50:80
<LOCAL_GATE>99:80
19#.##8.217.222:80
19#.##8.217.250:80
19#.##8.217.31:80
19#.##8.217.210:80
19#.##8.217.71:80
19#.##8.217.206:80
19#.##8.217.82:80
<LOCAL_GATE>95:80
19#.##8.217.212:80
<LOCAL_GATE>6:80
<LOCAL_GATE>57:80
<LOCAL_GATE>27:80
<LOCAL_GATE>69:80
19#.##8.217.58:80
19#.##8.217.30:80
<LOCAL_GATE>47:80
19#.##8.217.50:8080
19#.##8.217.50:8090
19#.##8.217.50:8888
19#.##8.217.50:9000
19#.##8.217.50:2222
<LOCAL_GATE>0:8080
19#.###.217.224:8080
<LOCAL_GATE>65:8080
<LOCAL_GATE>74:8080
19#.##8.217.95:8080
<LOCAL_GATE>33:8080
<LOCAL_GATE>73:8080
<LOCAL_GATE>53:8080
19#.##8.217.24:8080
19#.###.217.204:8080
19#.##8.217.41:8080
<LOCAL_GATE>26:8080
19#.##8.217.49:8080
<LOCAL_GATE>51:8080
19#.###.217.248:8080
<LOCAL_GATE>04:8080
<LOCAL_GATE>76:8080
19#.###.217.233:8080
<LOCAL_GATE>11:8080
<LOCAL_GATE>03:8080
19#.##8.217.88:8080
<LOCAL_GATE>31:8080
<LOCAL_GATE>29:8080
19#.##8.217.23:8080
19#.###.217.227:8080
<LOCAL_GATE>06:8080
19#.###.217.231:8080
<LOCAL_GATE>81:8080
19#.###.217.217:8080
19#.##8.217.98:8080
19#.###.217.236:8080
19#.###.217.242:8080
<LOCAL_GATE>63:8080
19#.##8.217.6:8080
19#.##8.217.80:8080
<LOCAL_GATE>72:8080
<LOCAL_GATE>49:8080
<LOCAL_GATE>40:8080
<LOCAL_GATE>71:8080
19#.##8.217.58:8080
<LOCAL_GATE>57:8080
19#.##8.217.48:8080
<LOCAL_GATE>6:8080
19#.##8.217.71:8080
19#.##8.217.62:8080
19#.###.217.250:8080
19#.###.217.209:8080
<LOCAL_GATE>58:8080
<LOCAL_GATE>69:8080
19#.##8.217.87:8080
19#.##8.217.30:8080
19#.###.217.206:8080
<LOCAL_GATE>16:8080
19#.##8.217.8:8080
19#.##8.217.31:8080
19#.##8.217.4:8080
<LOCAL_GATE>59:8080
19#.###.217.222:8080
<LOCAL_GATE>95:8080
<LOCAL_GATE>77:8080
<LOCAL_GATE>27:8080
<LOCAL_GATE>50:8080
19#.##8.217.82:8080
19#.###.217.252:8080
19#.##8.217.60:8080
<LOCAL_GATE>41:8080
19#.###.217.239:8080
<LOCAL_GATE>36:8080
19#.###.217.241:8080
19#.##8.217.34:8080
<LOCAL_GATE>68:8080
19#.###.217.212:8080
<LOCAL_GATE>99:8080
<LOCAL_GATE>67:8080
19#.###.217.210:8080
<LOCAL_GATE>35:8080
19#.##8.217.91:8080
12#.##9.57.14:1234
<LOCAL_GATE>47:8080
<LOCAL_GATE>29:8090
19#.###.217.242:8090
19#.###.217.248:8090
<LOCAL_GATE>03:8090
19#.###.217.238:8080
<LOCAL_GATE>65:8090
19#.###.217.202:8080
19#.##8.217.49:8090
<LOCAL_GATE>15:8080
5.##.#39.161:1234
<LOCAL_GATE>33:8090
<LOCAL_GATE>63:8090
<LOCAL_GATE>17:8080
<LOCAL_GATE>62:8080
<LOCAL_GATE>49:8090
19#.###.217.224:8090
19#.###.217.231:8090
19#.###.217.216:8080
19#.###.217.217:8090
<LOCAL_GATE>06:8090
19#.##8.217.85:8080
<LOCAL_GATE>51:8090
19#.###.217.228:8080
19#.##8.217.38:8080
19#.###.217.204:8090
<LOCAL_GATE>11:8090
19#.##8.217.52:8080
19#.###.217.233:8090
14#.##.115.253:1234
1.#.1.1:443
8.#.8.8:443
19#.###.217.233:8888
19#.##8.217.52:8090
19#.###.217.216:8090
19#.###.217.238:8090
<LOCAL_GATE>62:8090
<LOCAL_GATE>29:8888
19#.###.217.224:8888
<LOCAL_GATE>15:8090
<LOCAL_GATE>17:8090
<LOCAL_GATE>33:8888
<LOCAL_GATE>51:8888
19#.##8.217.85:8090
19#.###.217.228:8090
19#.###.217.248:8888
19#.##8.217.38:8090
19#.###.217.202:8090
19#.##8.217.33:8080
<LOCAL_GATE>64:8080
19#.##8.217.26:8080
19#.##8.217.35:8080
<LOCAL_GATE>07:8080
19#.##8.217.84:8080
19#.##8.217.63:8080
<LOCAL_GATE>91:8080
<LOCAL_GATE>46:8080
<LOCAL_GATE>44:8080
10#.##.198.225:1234
<LOCAL_GATE>21:8080
19#.###.217.225:8080
<LOCAL_GATE>76:8090
<LOCAL_GATE>04:8090
19#.##8.217.79:8080
<LOCAL_GATE>53:8090
<LOCAL_GATE>13:8080
<LOCAL_GATE>59:8090
19#.##8.217.24:8090
<LOCAL_GATE>9:8080
<LOCAL_GATE>73:8090
<LOCAL_GATE>0:8090
19#.##8.217.71:8090
19#.###.217.235:8080
19#.##8.217.80:8090
<LOCAL_GATE>95:8090
19#.##8.217.48:8090
19#.##8.217.20:8080
19#.##8.217.41:8090
19#.##8.217.70:8080
19#.##8.217.87:8090
19#.##8.217.30:8090
19#.###.217.236:8090
19#.##8.217.23:8090
<LOCAL_GATE>81:8090
19#.##8.217.6:8090
19#.###.217.206:8090
19#.##8.217.8:8090
<LOCAL_GATE>69:8090
19#.##8.217.4:8090
19#.##8.217.58:8090
<LOCAL_GATE>16:8090
19#.##8.217.98:8090
19#.###.217.209:8090
<LOCAL_GATE>71:8090
19#.##8.217.62:8090
<LOCAL_GATE>40:8090
19#.###.217.250:8090
<LOCAL_GATE>31:8090
19#.###.217.227:8090
<LOCAL_GATE>77:8090
<LOCAL_GATE>6:8090
<LOCAL_GATE>57:8090
<LOCAL_GATE>72:8090
19#.###.217.210:8090
<LOCAL_GATE>58:8090
<LOCAL_GATE>35:8090
<LOCAL_GATE>26:8090
<LOCAL_GATE>27:8090
19#.##8.217.88:8090
19#.###.217.239:8090
19#.###.217.222:8090
<LOCAL_GATE>50:8090
19#.###.217.252:8090
<LOCAL_GATE>41:8090
19#.##8.217.31:8090
19#.###.217.241:8090
<LOCAL_GATE>36:8090
<LOCAL_GATE>99:8090
19#.##8.217.82:8090
19#.##8.217.34:8090
19#.###.217.212:8090
19#.##8.217.60:8090
19#.##8.217.91:8090
<LOCAL_GATE>68:8090
<LOCAL_GATE>67:8090
<LOCAL_GATE>47:8090
19#.##8.217.255:80
19#.###.217.255:8080
19#.###.217.255:8090
19#.###.217.238:8888
44.###.10.176:1234
19#.##8.217.38:8888
19#.###.217.255:8888
<LOCAL_GATE>51:9000
19#.###.217.202:8888
<LOCAL_GATE>29:9000
19#.###.217.216:8888
19#.###.217.224:9000
<LOCAL_GATE>03:8888
19#.###.217.248:9000
19#.##8.217.85:8888
<LOCAL_GATE>15:8888
19#.###.217.242:8888
19#.###.217.233:9000
<LOCAL_GATE>33:9000
<LOCAL_GATE>17:8888
19#.###.217.228:8888
<LOCAL_GATE>65:8888
<LOCAL_GATE>11:8888
19#.###.217.255:9000
<LOCAL_GATE>63:8888
19#.##8.217.49:8888
19#.###.217.217:8888
<LOCAL_GATE>62:8888
19#.##8.217.52:8888
<LOCAL_GATE>49:8888
<LOCAL_GATE>5:80
<LOCAL_GATE>06:8888
19#.###.217.231:8888
19#.###.217.204:8888
<LOCAL_GATE>40:8888
<LOCAL_GATE>0:8888
19#.##8.217.88:8888
<LOCAL_GATE>73:8888
<LOCAL_GATE>26:8888
19#.##8.217.95:8090
19#.##8.217.33:8090
<LOCAL_GATE>91:8090
19#.###.217.227:8888
19#.##8.217.35:8090
19#.##8.217.6:8888
<LOCAL_GATE>72:8888
19#.##8.217.84:8090
<LOCAL_GATE>53:8888
19#.##8.217.98:8888
<LOCAL_GATE>76:8888
19#.##8.217.41:8888
19#.##8.217.23:8888
19#.##8.217.4:8888
<LOCAL_GATE>57:8888
19#.##8.217.58:8888
19#.##8.217.80:8888
<LOCAL_GATE>74:8090
<LOCAL_GATE>21:8090
19#.##8.217.48:8888
<LOCAL_GATE>59:8888
<LOCAL_GATE>31:8888
<LOCAL_GATE>44:8090
<LOCAL_GATE>64:8090
19#.##8.217.26:8090
19#.##8.217.63:8090
19#.##8.217.24:8888
<LOCAL_GATE>07:8090
<LOCAL_GATE>71:8888
<LOCAL_GATE>58:8888
<LOCAL_GATE>9:8090
19#.###.217.225:8090
19#.##8.217.87:8888
19#.###.217.235:8090
<LOCAL_GATE>77:8888
<LOCAL_GATE>13:8090
<LOCAL_GATE>46:8090
19#.##8.217.79:8090
19#.###.217.209:8888
<LOCAL_GATE>69:8888
19#.##8.217.20:8090
<LOCAL_GATE>04:8888
19#.##8.217.31:8888
<LOCAL_GATE>6:8888
<LOCAL_GATE>81:8888
19#.##8.217.62:8888
19#.##8.217.71:8888
19#.###.217.236:8888
<LOCAL_GATE>95:8888
19#.###.217.222:8888
19#.##8.217.30:8888
<LOCAL_GATE>16:8888
19#.##8.217.70:8090
19#.##8.217.8:8888
19#.###.217.206:8888
<LOCAL_GATE>35:8888
19#.###.217.250:8888
<LOCAL_GATE>36:8888
19#.###.217.212:8888
<LOCAL_GATE>68:8888
19#.##8.217.82:8888
19#.###.217.252:8888
31.##.115.42:1234
<LOCAL_GATE>47:8888
<LOCAL_GATE>50:8888
<LOCAL_GATE>41:8888
19#.###.217.210:8888
19#.###.217.239:8888
19#.###.217.241:8888
19#.##8.217.34:8888
19#.##8.217.91:8888
19#.##8.217.60:8888
<LOCAL_GATE>27:8888
<LOCAL_GATE>99:8888
<LOCAL_GATE>67:8888
19#.##8.217.38:9000
<LOCAL_GATE>33:2222
19#.###.217.242:9000
19#.##8.217.85:9000
19#.###.217.238:9000
19#.###.217.224:2222
<LOCAL_GATE>62:9000
19#.##8.217.52:9000
19#.###.217.228:9000
19#.###.217.202:9000
<LOCAL_GATE>29:2222
<LOCAL_GATE>49:9000
<LOCAL_GATE>51:2222
<LOCAL_GATE>03:9000
<LOCAL_GATE>17:9000
<LOCAL_GATE>63:9000
19#.###.217.216:9000
19#.##8.217.49:9000
<LOCAL_GATE>15:9000
17#.##.35.41:1234
<LOCAL_GATE>65:9000
19#.###.217.217:9000
19#.###.217.231:9000
<LOCAL_GATE>06:9000
<LOCAL_GATE>11:9000
19#.###.217.204:9000
19#.###.217.227:9000
<LOCAL_GATE>26:9000
19#.##8.217.41:9000
19#.##8.217.33:8888
19#.##8.217.80:9000
<LOCAL_GATE>5:8080
19#.##8.217.88:9000
<LOCAL_GATE>31:9000
19#.##8.217.98:9000
<LOCAL_GATE>04:9000
<LOCAL_GATE>73:9000
<LOCAL_GATE>95:9000
19#.###.217.236:9000
19#.##8.217.95:8888
19#.##8.217.24:9000
<LOCAL_GATE>81:9000
<LOCAL_GATE>0:9000
<LOCAL_GATE>53:9000
19#.##8.217.23:9000
19#.##8.217.30:9000
<LOCAL_GATE>76:9000
<LOCAL_GATE>40:9000
19#.##8.217.6:9000
19#.##8.217.8:9000
<LOCAL_GATE>6:9000
19#.##8.217.87:9000
<LOCAL_GATE>77:9000
<LOCAL_GATE>69:9000
19#.##8.217.4:9000
<LOCAL_GATE>41:9000
19#.###.217.225:8888
19#.##8.217.60:9000
<LOCAL_GATE>58:9000
<LOCAL_GATE>68:9000
19#.##8.217.71:9000
19#.###.217.222:9000
<LOCAL_GATE>13:8888
19#.###.217.209:9000
19#.###.217.206:9000
<LOCAL_GATE>16:9000
19#.###.217.250:9000
19#.##8.217.62:9000
<LOCAL_GATE>50:9000
<LOCAL_GATE>21:8888
<LOCAL_GATE>74:8888
19#.###.217.241:9000
19#.##8.217.31:9000
19#.##8.217.34:9000
19#.##8.217.79:8888
<LOCAL_GATE>36:9000
<LOCAL_GATE>47:9000
<LOCAL_GATE>27:9000
<LOCAL_GATE>99:9000
19#.###.217.210:9000
19#.###.217.239:9000
<LOCAL_GATE>59:9000
<LOCAL_GATE>67:9000
19#.##8.217.91:9000
19#.##8.217.82:9000
19#.###.217.212:9000
19#.###.217.252:9000
<LOCAL_GATE>35:9000
62.##.106.6:1234
<LOCAL_GATE>8:80
<LOCAL_GATE>02:80
19#.##8.217.249:80
19#.##8.217.5:80
19#.##8.217.36:80
19#.###.217.216:2222
<LOCAL_GATE>62:2222
19#.##8.217.85:2222
19#.###.217.231:2222
19#.###.217.238:2222
<LOCAL_GATE>15:2222
<LOCAL_GATE>65:2222
<LOCAL_GATE>06:2222
<LOCAL_GATE>63:2222
<LOCAL_GATE>11:2222
<LOCAL_GATE>31:2222
19#.###.217.236:2222
<LOCAL_GATE>5:8090
<LOCAL_GATE>0:2222
19#.##8.217.88:2222
19#.##8.217.23:2222
19#.##8.217.80:2222
<LOCAL_GATE>26:2222
<LOCAL_GATE>73:2222
<LOCAL_GATE>76:2222
19#.###.217.227:2222
19#.##8.217.98:2222
<LOCAL_GATE>91:8888
19#.##8.217.35:8888
<LOCAL_GATE>81:2222
<LOCAL_GATE>04:2222
19#.##8.217.87:2222
<LOCAL_GATE>69:2222
19#.###.217.241:2222
<LOCAL_GATE>13:9000
<LOCAL_GATE>35:2222
19#.###.217.235:8888
19#.###.217.250:2222
17#.#.208.151:1234
<LOCAL_GATE>77:2222
<LOCAL_GATE>16:2222
19#.##8.217.91:2222
19#.###.217.222:2222
<LOCAL_GATE>21:9000
19#.##8.217.79:9000
19#.###.217.206:2222
19#.###.217.225:9000
<LOCAL_GATE>99:2222
<LOCAL_GATE>95:2222
19#.##8.217.30:2222
<LOCAL_GATE>9:8888
<LOCAL_GATE>36:2222
19#.##8.217.70:8888
19#.##8.217.62:2222
<LOCAL_GATE>67:2222
<LOCAL_GATE>27:2222
<LOCAL_GATE>59:2222
<LOCAL_GATE>46:8888
19#.###.217.239:2222
19#.##8.217.8:2222
19#.##8.217.60:2222
<LOCAL_GATE>68:2222
19#.##8.217.20:8888
61.##.162.66:1234
<LOCAL_GATE>92:80
<LOCAL_GATE>60:80
<LOCAL_GATE>83:80
19#.##8.217.208:80
19#.##8.217.215:80
19#.##8.217.247:80
<LOCAL_GATE>05:80
19#.##8.217.92:80
19#.##8.217.29:80
19#.##8.217.74:80
19#.##8.217.220:80
19#.##8.217.229:80
19#.##8.217.25:80
<LOCAL_GATE>5:8888
<LOCAL_GATE>91:9000
19#.##8.217.35:9000
19#.##8.217.33:9000
19#.##8.217.41:2222
19#.##8.217.73:80
19#.##8.217.42:80
19#.##8.217.94:80
<LOCAL_GATE>56:80
19#.##8.217.21:80
19#.##8.217.226:80
<LOCAL_GATE>24:80
<LOCAL_GATE>97:80
<LOCAL_GATE>2:80
<LOCAL_GATE>4:80
19#.##8.217.78:80
19#.###.217.225:2222
<LOCAL_GATE>13:2222
19#.##8.217.79:2222
62.###.2.68:1234
<LOCAL_GATE>21:2222
19#.###.217.235:9000
19#.##8.217.26:8888
19#.##8.217.48:9000
<LOCAL_GATE>71:9000
<LOCAL_GATE>44:8888
19#.##8.217.63:8888
<LOCAL_GATE>64:8888
<LOCAL_GATE>57:9000
19#.##8.217.58:9000
19#.###.217.255:2222
19#.##8.217.35:2222
19#.###.217.247:8080
19#.##8.217.251:80
<LOCAL_GATE>60:8080
<LOCAL_GATE>92:8080
<LOCAL_GATE>5:9000
19#.###.217.220:8080
12#.##6.79.182:1234
<LOCAL_GATE>05:8080
19#.##8.217.29:8080
19#.##8.217.92:8080
19#.##8.217.74:8080
19#.###.217.215:8080
19#.##8.217.25:8080
19#.###.217.229:8080
<LOCAL_GATE>91:2222
<LOCAL_GATE>83:8080
19#.###.217.208:8080
19#.##8.217.232:80
19#.##8.217.45:80
19#.##8.217.54:80
<LOCAL_GATE>75:80
19#.##8.217.221:80
19#.##8.217.72:80
19#.##8.217.81:80
19#.##8.217.73:8080
19#.###.217.226:8080
<LOCAL_GATE>80:80
19#.##8.217.99:80
<LOCAL_GATE>2:8080
19#.##8.217.43:80
19#.##8.217.246:80
19#.##8.217.3:80
19#.##8.217.96:80
<LOCAL_GATE>55:80
<LOCAL_GATE>86:80
19#.##8.217.207:80
19#.##8.217.65:80
19#.##8.217.83:80
<LOCAL_GATE>00:80
<LOCAL_GATE>19:80
<LOCAL_GATE>56:8080
<LOCAL_GATE>4:8080
<LOCAL_GATE>53:2222
<LOCAL_GATE>97:8080
19#.##8.217.42:8080
19#.##8.217.95:9000
19#.##8.217.70:9000
19#.##8.217.20:9000
<LOCAL_GATE>9:9000
<LOCAL_GATE>24:8080
19#.##8.217.94:8080
19#.##8.217.78:8080
<LOCAL_GATE>46:9000
19#.##8.217.21:8080
<LOCAL_GATE>74:9000
19#.##8.217.26:9000
11#.##.44.111:1234
<LOCAL_GATE>44:9000
<LOCAL_GATE>71:2222
19#.##8.217.48:2222
19#.##8.217.63:9000
<LOCAL_GATE>64:9000
19#.##8.217.234:80
<LOCAL_GATE>7:80
<LOCAL_GATE>48:80
<LOCAL_GATE>12:80
<LOCAL_GATE>22:80
19#.##8.217.58:2222
19#.##8.217.253:80
19#.##8.217.46:80
19#.###.217.247:8090
<LOCAL_GATE>83:8090
<LOCAL_GATE>61:80
19#.##8.217.56:80
19#.##8.217.61:80
19#.###.217.215:8090
19#.##8.217.51:80
<LOCAL_GATE>60:8090
19#.###.217.208:8090
19#.##8.217.201:80
19#.##8.217.66:80
<LOCAL_GATE>92:8090
19#.##8.217.29:8090
82.##.113.245:1234
19#.###.217.251:8080
19#.##8.217.36:8080
19#.##8.217.92:8090
<LOCAL_GATE>05:8090
19#.###.217.228:2222
<LOCAL_GATE>8:8080
19#.##8.217.74:8090
19#.###.217.249:8080
19#.###.217.220:8090
19#.###.217.229:8090
<LOCAL_GATE>02:8080
19#.##8.217.5:8080
19#.##8.217.25:8090
19#.##8.217.205:80
<LOCAL_GATE>1:80
19#.##8.217.55:80
19#.##8.217.57:80
19#.##8.217.99:8080
19#.##8.217.83:8080
<LOCAL_GATE>00:8080
19#.##8.217.65:8080
19#.###.217.207:8080
19#.##8.217.3:8080
<LOCAL_GATE>86:8080
19#.##8.217.96:8080
<LOCAL_GATE>55:8080
<LOCAL_GATE>80:8080
<LOCAL_GATE>19:8080
19#.###.217.246:8080
19#.##8.217.43:8080
<LOCAL_GATE>:80
19#.##8.217.90:80
40.##.11.253:1234
<LOCAL_GATE>72:9000
<LOCAL_GATE>12:8080
<LOCAL_GATE>60:8888
<LOCAL_GATE>05:8888
<LOCAL_GATE>48:8080
<LOCAL_GATE>64:2222
<LOCAL_GATE>83:8888
19#.###.217.247:8888
<LOCAL_GATE>22:8080
<LOCAL_GATE>:8080
19#.##8.217.26:2222
<LOCAL_GATE>92:8888
19#.###.217.234:8080
19#.###.217.208:8888
<LOCAL_GATE>7:8080
19#.###.217.215:8888
<LOCAL_GATE>44:2222
19#.##8.217.63:2222
<LOCAL_GATE>:8090
<LOCAL_GATE>:8888
19#.##8.217.53:80
19#.##8.217.21:8090
19#.##8.217.36:8090
19#.##8.217.46:8080
19#.##8.217.51:8080
19#.##8.217.92:8888
19#.##8.217.66:8080
19#.##8.217.244:80
<LOCAL_GATE>07:8888
19#.##8.217.2:80
<LOCAL_GATE>61:8080
19#.###.217.201:8080
<LOCAL_GATE>56:8090
19#.##8.217.73:8090
<LOCAL_GATE>02:8090
<LOCAL_GATE>:9000
19#.###.217.221:8080
19#.##8.217.74:8888
19#.###.217.226:8090
19#.###.217.251:8090
19#.##8.217.25:8888
19#.##8.217.56:8080
19#.###.217.220:8888
19#.###.217.253:8080
19#.###.217.229:8888
19#.##8.217.29:8888
19#.##8.217.61:8080
<LOCAL_GATE>8:8090
19#.###.217.249:8090
19#.##8.217.94:8090
19#.##8.217.42:8090
<LOCAL_GATE>9:2222
19#.##8.217.5:8090
<LOCAL_GATE>:2222
19#.##8.217.77:80
19#.##8.217.93:80
19#.##8.217.89:80
45.###.216.114:1234
<LOCAL_GATE>1:8080
19#.###.217.205:8080
19#.##8.217.55:8080
19#.##8.217.3:8090
19#.##8.217.99:8090
<LOCAL_GATE>86:8090
19#.##8.217.57:8080
19#.##8.217.96:8090
19#.###.217.246:8090
<LOCAL_GATE>80:8090
<LOCAL_GATE>55:8090
19#.##8.217.43:8090
<LOCAL_GATE>82:80
<LOCAL_GATE>79:80
19#.##8.217.86:80
19#.##8.217.69:80
<LOCAL_GATE>12:8090
<LOCAL_GATE>7:8090
19#.###.217.215:9000
19#.###.217.234:8090
<LOCAL_GATE>83:9000
<LOCAL_GATE>92:9000
19#.##8.217.90:8080
<LOCAL_GATE>48:8090
<LOCAL_GATE>60:9000
<LOCAL_GATE>22:8090
<LOCAL_GATE>05:9000
19#.###.217.208:9000
19#.###.217.247:9000
19#.##8.217.54:8080
14#.##.130.100:1234
<LOCAL_GATE>02:8888
19#.##8.217.66:8090
19#.##8.217.61:8090
19#.###.217.251:8888
19#.###.217.220:9000
19#.##8.217.29:9000
19#.###.217.201:8090
19#.##8.217.36:8888
19#.###.217.244:8080
19#.##8.217.42:8888
19#.##8.217.92:9000
19#.###.217.221:8090
<LOCAL_GATE>8:8888
19#.##8.217.25:9000
19#.###.217.253:8090
19#.##8.217.5:8888
19#.##8.217.56:8090
<LOCAL_GATE>07:9000
<LOCAL_GATE>61:8090
<LOCAL_GATE>56:8888
19#.##8.217.73:8888
19#.###.217.249:8888
19#.##8.217.21:8888
19#.##8.217.46:8090
19#.##8.217.2:8080
19#.##8.217.74:9000
19#.##8.217.94:8888
19#.###.217.226:8888
19#.###.217.229:9000
19#.###.217.205:8090
19#.##8.217.20:2222
19#.##8.217.77:8080
19#.###.217.232:8080
<LOCAL_GATE>80:8888
19#.##8.217.89:8080
<LOCAL_GATE>86:8888
19#.##8.217.81:8080
<LOCAL_GATE>00:8090
19#.##8.217.45:8080
19#.###.217.246:8888
19#.##8.217.55:8090
<LOCAL_GATE>2:8090
19#.##8.217.72:8080
<LOCAL_GATE>55:8888
19#.##8.217.96:8888
19#.##8.217.65:8090
<LOCAL_GATE>75:8080
19#.##8.217.99:8888
19#.##8.217.83:8090
19#.##8.217.93:8080
19#.##8.217.57:8090
<LOCAL_GATE>97:8090
19#.##8.217.78:8090
<LOCAL_GATE>4:8090
19#.##8.217.43:8888
<LOCAL_GATE>1:8090
19#.##8.217.3:8888
<LOCAL_GATE>19:8090
<LOCAL_GATE>24:8090
19#.##8.217.52:2222
19#.###.217.207:8090
20.##.195.26:1234
<LOCAL_GATE>48:8888
<LOCAL_GATE>7:8888
19#.###.217.234:8888
<LOCAL_GATE>12:8888
<LOCAL_GATE>83:2222
<LOCAL_GATE>82:8080
19#.##8.217.69:8080
<LOCAL_GATE>22:8888
<LOCAL_GATE>17:2222
<LOCAL_GATE>79:8080
<LOCAL_GATE>92:2222
<LOCAL_GATE>60:2222
<LOCAL_GATE>87:80
19#.###.217.201:8888
19#.##8.217.66:8888
19#.##8.217.54:8090
19#.##8.217.90:8090
19#.###.217.221:8888
19#.##8.217.86:8080
82.##.109.74:1234
19#.###.217.244:8090
19#.##8.217.53:8080
19#.##8.217.61:8888
<LOCAL_GATE>8:9000
19#.##8.217.42:9000
<LOCAL_GATE>56:9000
19#.##8.217.71:2222
19#.##8.217.77:8090
19#.##8.217.94:9000
19#.##8.217.2:8090
19#.###.217.249:9000
19#.##8.217.55:8888
19#.###.217.235:2222
19#.##8.217.5:9000
<LOCAL_GATE>02:9000
19#.##8.217.0:80
19#.###.217.246:9000
19#.##8.217.3:9000
19#.##8.217.57:8888
<LOCAL_GATE>00:8888
19#.##8.217.99:9000
19#.##8.217.83:8888
<LOCAL_GATE>55:9000
<LOCAL_GATE>1:8888
19#.##8.217.93:8090
19#.##8.217.89:8090
19#.##8.217.45:8090
19#.##8.217.96:9000
<LOCAL_GATE>57:2222
19#.##8.217.81:8090
<LOCAL_GATE>80:9000
19#.##8.217.43:9000
<LOCAL_GATE>86:9000
19#.##8.217.0:8080
19#.###.217.205:8888
19#.###.217.232:8090
19#.##8.217.0:8090
16#.###.181.132:1234
19#.##8.217.0:8888
19#.##8.217.54:8888
19#.##8.217.66:9000
19#.##8.217.90:8888
19#.###.217.201:9000
19#.##8.217.0:9000
19#.###.217.221:9000
<LOCAL_GATE>87:8080
19#.##8.217.28:80
19#.##8.217.211:80
19#.##8.217.245:80
19#.##8.217.94:2222
19#.###.217.244:8888
19#.##8.217.42:2222
19#.##8.217.53:8090
19#.##8.217.5:2222
<LOCAL_GATE>56:2222
19#.##8.217.2:8888
19#.##8.217.77:8888
19#.##8.217.51:8090
19#.##8.217.61:9000
19#.###.217.249:2222
19#.##8.217.55:9000
19#.##8.217.84:8888
22#.##1.232.56:1234
19#.##8.217.75:80
19#.##8.217.57:9000
19#.##8.217.99:2222
19#.##8.217.81:8888
19#.##8.217.83:9000
19#.##8.217.3:2222
19#.##8.217.96:2222
<LOCAL_GATE>46:2222
19#.##8.217.93:8888
<LOCAL_GATE>00:9000
19#.##8.217.89:8888
19#.###.217.205:9000
19#.###.217.232:8888
19#.##8.217.45:8888
<LOCAL_GATE>1:9000
19#.##8.217.27:80
<LOCAL_GATE>96:80
<LOCAL_GATE>28:80
19#.##8.217.54:9000
19#.##8.217.69:8090
<LOCAL_GATE>7:9000
19#.##8.217.90:9000
19#.###.217.234:9000
<LOCAL_GATE>48:9000
<LOCAL_GATE>79:8090
<LOCAL_GATE>12:9000
19#.##8.217.66:2222
<LOCAL_GATE>87:8090
<LOCAL_GATE>22:9000
<LOCAL_GATE>82:8090
36.###.152.152:1234
<LOCAL_GATE>66:80
19#.##8.217.37:80
<LOCAL_GATE>09:80
<LOCAL_GATE>08:80
<LOCAL_GATE>32:80
<LOCAL_GATE>98:80
19#.##8.217.28:8080
19#.##8.217.86:8090
19#.##8.217.53:8888
19#.###.217.244:9000
19#.##8.217.61:2222
19#.##8.217.2:9000
19#.###.217.245:8080
<LOCAL_GATE>02:2222
19#.##8.217.77:9000
19#.##8.217.36:9000
19#.###.217.211:8080
19#.##8.217.73:9000
19#.##8.217.24:2222
19#.##8.217.29:2222
19#.##8.217.51:8888
19#.##8.217.84:9000
<LOCAL_GATE>61:8888
<LOCAL_GATE>49:2222
19#.###.217.253:8888
19#.###.217.220:2222
19#.##8.217.92:2222
19#.##8.217.46:8888
19#.###.217.217:2222
19#.###.217.251:9000
19#.##8.217.56:8888
19#.##8.217.230:80
19#.##8.217.240:80
<LOCAL_GATE>39:80
<LOCAL_GATE>93:80
<LOCAL_GATE>89:80
19#.##8.217.21:9000
19#.###.217.226:9000
19#.##8.217.89:9000
19#.##8.217.93:9000
19#.##8.217.83:2222
19#.##8.217.75:8080
19#.##8.217.57:2222
<LOCAL_GATE>10:80
89.###.228.38:1234
89.###.228.38:2222
19#.##8.217.203:80
<LOCAL_GATE>3:80
19#.##8.217.7:80
<LOCAL_GATE>79:8888
<LOCAL_GATE>87:8888
19#.##8.217.27:8080
<LOCAL_GATE>03:2222
<LOCAL_GATE>82:8888
19#.##8.217.69:8888
<LOCAL_GATE>7:2222
<LOCAL_GATE>28:8080
19#.###.217.234:2222
<LOCAL_GATE>4:8888
19#.###.217.207:8888
19#.##8.217.54:2222
19#.##8.217.78:8888
19#.##8.217.72:8090
19#.###.217.210:2222
<LOCAL_GATE>75:8090
19#.##8.217.65:8888
<LOCAL_GATE>96:8080
<LOCAL_GATE>24:8888
19#.###.217.221:2222
<LOCAL_GATE>19:8888
<LOCAL_GATE>97:8888
19#.##8.217.86:8888
<LOCAL_GATE>2:8888
<LOCAL_GATE>14:80
19#.##8.217.28:8090
<LOCAL_GATE>38:80
19#.##8.217.214:80
<LOCAL_GATE>43:80
19#.##8.217.55:2222
<LOCAL_GATE>08:8080
<LOCAL_GATE>09:8080
19#.##8.217.2:2222
<LOCAL_GATE>98:8080
19#.##8.217.37:8080
19#.##8.217.53:9000
<LOCAL_GATE>78:80
<LOCAL_GATE>66:8080
<LOCAL_GATE>32:8080
19#.###.217.245:8090
19#.###.217.211:8090
19#.##8.217.64:80
19#.###.217.244:2222
14#.###.133.234:1234
19#.##8.217.51:9000
<LOCAL_GATE>37:80
19#.##8.217.36:2222
19#.##8.217.59:80
<LOCAL_GATE>84:80
19#.###.217.253:9000
19#.##8.217.84:2222
<LOCAL_GATE>18:80
<LOCAL_GATE>52:80
<LOCAL_GATE>94:80
19#.##8.217.21:2222
19#.##8.217.73:2222
<LOCAL_GATE>61:9000
<LOCAL_GATE>89:8080
19#.##8.217.46:9000

Attacks using a special dictionary (brute-force technique) via the SSH protocol

DNS ASK:

if##nfig.co
we#.#mrpool.eu
ww#.#oogle.com
dn#.google

Sends data to the following servers:

1.#.1.1:443
8.#.8.8:443

Receives data from the following servers:

1.#.1.1:443
8.#.8.8:443

Other:

Collects OS information

Collects CPU information

Collects RAM information

Collects information about network activity

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению