Linux.Siggen.7205

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

e28081

Network activity:

Awaits incoming connections on ports:

127.0.0.1:33337

Establishes connection:

8.#.8.8:53
45.###.232.208:33335

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

DNS ASK:

ro##me.xyz

Sends data to the following servers:

45.###.232.208:33335
18#.##8.145.252:23
17#.##.213.114:23
21#.##.206.47:23
51.###.186.14:23
15#.##7.216.249:23
93.##.92.22:23
19#.##.185.51:23
25#.##4.50.184:23
12#.##9.5.136:23
22.##2.50.11:23
13#.##.100.65:23
60.###.77.113:23
15#.##1.222.187:23
14#.##8.205.233:23
13#.##7.107.62:23
21.##1.58.6:23
11#.#1.182.5:23
1.##.118.173:23
12#.##.216.236:23
22.##8.22.8:23
19#.##1.233.185:23
19#.#08.16.9:23
18.###.102.32:23
27.#.105.123:23
73.###.39.146:23
19#.##1.70.226:23
23#.##7.42.60:23
15#.##3.129.137:23
13#.##7.70.136:23
19#.#3.70.44:23
76.###.133.203:23
53.##.39.174:23
16#.##2.96.15:23
18#.##9.208.31:23
12.###.223.196:23
11.###.226.144:23
20#.##3.112.56:23
17#.#5.90.47:23
21#.##2.77.224:23
30.###.43.153:23
22#.#.137.83:23
13#.##.182.226:23
39.##.119.113:23
20#.##7.233.240:23
23#.##.196.246:23
21#.##.238.184:23
17#.##.29.138:23
13#.#3.0.22:23
15#.#34.54.1:23
10#.##4.108.52:23
26.##.152.4:23
23#.##6.120.100:23
20#.##8.52.143:23
64.##.201.33:23
14#.##9.18.20:23
12#.##.109.84:23
18#.##7.132.46:23
25#.#9.7.66:23
12#.##7.126.44:23
23#.##.175.171:23
19#.##1.219.120:23
21#.##6.128.254:23
46.###.57.252:23
19#.##6.139.20:23
56.#.46.198:23
12#.##5.19.83:23
23#.##.247.202:23
87.#.250.143:23
88.###.220.95:23
4.###.102.21:23
23#.##6.88.94:23
19#.##.36.130:23
18#.##7.110.27:23
74.#.254.153:23
66.##.220.21:23
16.###.149.70:23
11#.##.179.125:23
16#.##1.248.149:23
22#.##.120.109:23
76.##6.82.28:23
46.###.15.238:23
83.##.169.50:23
29.###.136.25:23
84.###.223.35:23
91.###.183.67:23
19#.##5.22.33:23
51.###.131.117:23
35.###.39.216:23
23#.##.94.176:23
24#.##1.106.225:23
12#.#.244.205:23
15#.##.228.77:23
23#.##6.203.83:23
14#.##9.22.168:23
15#.##4.197.114:23
23#.##0.124.74:23
10#.##1.123.45:23
98.##.221.198:23
79.##5.76.44:23
13#.##.63.112:23
62.###.220.235:23
78.###.33.190:23
23#.##2.13.141:23
23#.##5.232.50:23
21#.##.35.230:23
16#.##6.114.14:23
23#.##4.125.227:23
14#.##9.171.162:23
26.###.53.239:23
16.##2.73.59:23
14#.##4.173.39:23
13#.##.45.251:23
17#.##7.97.70:23
98.##.182.211:23
17#.##5.9.134:23
69.###.57.184:23
15#.##9.63.121:23
16#.##1.66.144:23
86.###.86.240:23
13#.##1.25.61:23
23#.##.35.107:23
10#.##3.143.104:23
5.##.153.252:23
2.###.133.199:23
32.##.148.11:23
20#.#6.90.12:23
12#.##.52.107:23
24#.##1.49.17:23
14#.##3.183.34:23
13#.##.199.103:23
21#.##.181.23:23
18.###.207.35:23
82.##.191.117:23
17#.#.70.91:23
22#.##.61.100:23
22#.##.12.181:23
39.##.88.18:23
93.###.127.90:23
21#.#0.0.26:23
11#.#.118.182:23
21#.##1.97.207:23
10#.##3.219.94:23
59.##.189.84:23
23#.#.65.183:23
21#.##3.11.43:23
10#.##7.158.233:23
44.###.178.59:23
19#.##4.53.101:23
12#.##8.113.44:23
13#.##2.41.95:23
56.##1.206.4:23
24#.##7.174.161:23
12#.##.201.223:23
34.###.154.158:23
38.##.25.121:23
70.##.141.135:23
65.###.167.105:23
83.##.182.9:23
33.##3.1.179:23
99.##.169.150:23
2.###.100.108:23
19#.##8.71.129:23
18#.#9.4.27:23
23#.##8.57.136:23
17#.##2.57.237:23
20#.##8.51.23:23
11#.##.218.160:23
19#.##.34.196:23
13#.#.69.212:23
24#.##9.2.190:23
19#.##9.105.18:23
12#.#3.86.83:23
19#.##8.159.68:23
55.###.116.215:23
13#.##9.51.222:23
75.###.71.250:23
24#.##2.98.209:23
38.##.201.92:23
39.##.186.112:23
7.###.129.188:23
16#.##3.175.106:23
31.###.225.145:23
24#.##.71.252:23
22#.##2.159.126:23
20#.##.240.84:23
95.##.224.151:23
24#.##5.19.115:23
37.##.157.179:23
30.###.97.255:23
34.##.216.66:23
21#.##.120.44:23
19#.#.117.29:23
93.##.218.53:23
22#.#16.2.33:23
22#.#.84.140:23
11#.##9.94.203:23
86.##.147.21:23
23#.##2.147.178:23
50.###.29.101:23
68.##.186.7:23
72.###.56.252:23
9.###.164.16:23
11#.##0.6.179:23
69.###.204.211:23
15#.##.163.98:23
22#.##9.2.210:23
25#.#.229.254:23
13#.##4.173.222:23
20#.##1.148.68:23
14#.##1.100.199:23
12#.##.100.113:23
13#.##0.183.5:23
17#.#49.79.8:23
79.##.42.11:23
25#.##2.136.248:23
10#.##.154.136:23
19#.##.102.80:23
14#.##.130.85:23
39.###.151.224:23
80.###.143.61:23
17#.##.126.73:23
20#.##7.225.220:23
75.###.89.140:23
11#.##5.85.249:23
17#.##5.218.30:23
31.###.209.178:23
62.##.1.249:23
19#.#.72.228:23
51.###.63.201:23
12#.##6.21.159:23
21.##.47.235:23
21#.##7.255.221:23
20#.##9.101.33:23
86.#.126.185:23
88.##7.61.9:23
86.###.203.50:23
17#.##0.131.142:23
99.##2.76.40:23
11#.##2.59.215:23
72.###.91.222:23
22#.##2.7.103:23
67.##5.98.47:23
23#.##.170.186:23
20#.##1.193.42:23
76.###.246.37:23
11#.##8.135.27:23
12#.##4.122.65:23
12#.##.160.59:23
40.##.4.78:23
15#.##0.25.201:23
21#.##.89.182:23
45.#.158.70:23
88.##.62.127:23
24#.##8.181.134:23
21#.##5.137.162:23
14#.##.211.27:23
10#.##2.178.129:23
18#.##.173.97:23
76.##.245.73:23
11#.##.159.234:23
12#.##8.90.217:23
30.###.155.25:23
20#.#19.86.2:23
33.##.27.108:23
21#.##0.60.91:23
22#.##.187.243:23
15#.##.72.141:23
23#.##4.250.70:23
61.##3.16.79:23
17#.##4.82.94:23
53.##.184.213:23
57.##.142.170:23
24#.##9.135.110:23
3.##.97.207:23
16#.##7.64.52:23
16#.#.90.147:23
35.##9.249.0:23
30.##.49.242:23
10#.##8.216.180:23
12#.##6.171.23:23
82.###.134.50:23
22#.##.136.149:23
13#.#.212.188:23
18#.##4.103.112:23
24#.##6.250.245:23
19#.##7.43.233:23
22.#.48.83:23
23#.#.134.251:23
64.##9.12.48:23
91.##8.135.6:23
90.###.79.139:23
34.###.217.20:23
13#.##3.150.239:23
21#.##3.56.186:23
11#.##.82.218:23
11#.##2.149.61:23
27.##.158.206:23
23#.##.226.11:23
22#.##.231.44:23
11#.##0.12.190:23
16#.##7.167.19:23
15#.##8.235.170:23
12#.##.41.156:23
22#.##.139.96:23
57.###.241.117:23
12#.#8.7.116:23
56.##.173.21:23
37.###.230.192:23
10#.##1.127.190:23
13#.##8.91.58:23
23#.##6.213.128:23
24#.##0.9.255:23
88.##.50.28:23
17.##.24.44:23
24#.##8.38.73:23
46.##8.56.2:23
11#.##.163.101:23

Receives data from the following servers:

45.###.232.208:33335

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению