Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Linux.Packed.74

Added to the Dr.Web virus database: 2018-05-06

Virus description added:

Technical Information

Malicious functions:
Removes itself
Modifies firewall settings:
  • iptables -I INPUT -p udp -m udp --dport 53328 -j ACCEPT
Network activity:
Awaits incoming connections on ports:
  • 127.0.0.1:32855
  • 0.0.0.0:53328
Establishes connection:
  • 8.#.8.8:53
  • [:##]:53328
  • 127.0.0.1:53328
  • 14#.##1.121.134:23
  • 52.##.123.71:80
  • 12#.##6.155.150:80
HTTP GET requests:
  • http://##.##5.58.43/
Sends data to the following servers:
  • 19#.###.223.123:38252
  • 90.#.38.104:23
  • 1.##.133.182:23
  • 22#.##.26.137:23
  • 22#.##.251.27:23
  • 85.###.141.198:23
  • 14#.##.147.208:23
  • 64.###.209.130:23
  • 20#.##7.40.71:23
  • 64.##6.83.69:23
  • 23#.##4.92.116:23
  • 18#.##0.64.102:23
  • 80.###.123.161:23
  • 20#.##9.102.94:23
  • 11#.##2.53.213:23
  • 14#.##.143.85:23
  • 44.###.221.162:23
  • 18#.#.171.139:23
  • 15#.##8.119.240:23
  • 21#.##8.122.55:23
  • 1.###.202.228:23
  • 14#.##1.49.76:23
  • 14#.##6.207.128:23
  • 23#.##4.158.143:23
  • 23#.##9.114.191:23
  • 20#.##.181.47:23
  • 24#.##0.146.207:23
  • 99.##.150.240:23
  • 16#.#1.166.7:23
  • 10#.##4.60.173:23
  • 50.###.104.234:23
  • 19.##4.51.5:23
  • 23#.##4.31.209:23
  • 19#.##1.88.191:23
  • 90.###.166.208:23
  • 67.###.221.148:23
  • 13#.##8.116.70:23
  • 22#.##5.176.175:23
  • 13.##4.60.55:23
  • 12#.##.205.107:23
  • 22#.##.22.134:23
  • 22#.##1.82.209:23
  • 19#.#7.144.4:23
  • 42.##1.67.72:23
  • 24#.##.67.170:23
  • 12#.##3.208.199:23
  • 19#.##.156.107:23
  • 58.###.90.207:23
  • 31.###.225.119:23
  • 13.##.60.1:23
  • 53.###.133.74:23
  • 59.##.190.230:23
  • 14#.##5.201.111:23
  • 59.##2.80.22:23
  • 14#.##1.121.134:23
  • 23#.##.102.79:23
  • 19#.##6.169.75:23
  • 52.##.63.87:23
  • 13.###.78.136:23
  • 21#.##.60.184:23
  • 23#.##6.249.95:23
  • 10#.##.126.193:23
  • 24#.##6.180.231:23
  • 22#.##.238.89:23
  • 15#.#42.1.31:23
  • 45.#.155.72:23
  • 22#.##.220.50:23
  • 18#.##1.116.11:23
  • 11#.##1.143.82:23
  • 17#.##.198.95:23
  • 12#.#.114.170:23
  • 11#.##.89.233:23
  • 59.###.237.162:23
  • 24#.##7.216.10:23
  • 97.##.37.28:23
  • 45.###.111.148:23
  • 25.#.29.211:23
  • 13#.##1.209.239:23
  • 96.###.179.203:23
  • 24.##.35.43:23
  • 12#.##9.180.214:23
  • 22#.##2.138.160:23
  • 96.###.148.129:23
  • 12#.##1.38.241:23
  • 14#.##7.10.31:23
  • 18#.##4.135.144:23
  • 86.###.76.147:23
  • 13#.##3.30.17:23
  • 17#.##.236.171:23
  • 23#.##8.157.175:23
  • 61.##4.61.43:23
  • 71.###.134.119:23
  • 17#.##8.121.241:23
  • 11#.##8.105.180:23
  • 98.##1.0.188:23
  • 39.###.127.70:23
  • 13#.##4.126.61:23
  • 43.##8.124.6:23
  • 17#.##7.232.249:23
  • 10#.##8.110.143:23
  • 21#.#2.90.65:23
  • 18#.##2.102.116:23
  • 21#.##0.105.19:23
  • 48.##.60.26:23
  • 67.##.158.17:23
  • 16#.##0.87.112:23
  • 24#.##4.26.67:23
  • 64.###.200.252:23
  • 24#.##1.96.117:23
  • 22#.##5.136.169:23
  • 11#.##8.220.201:23
  • 25#.#.12.226:23
  • 14.###.254.11:23
  • 11#.##3.74.60:23
  • 17#.##.111.45:23
  • 9.##.92.26:23
  • 20#.##.237.80:23
  • 22#.##.136.206:23
  • 17#.##4.109.45:23
  • 24#.##3.17.94:23
  • 42.##7.70.87:23
  • 61.##9.30.80:23
  • 18.##.5.5:23
  • 72.##1.175.2:23
  • 18#.##1.98.37:23
  • 15#.##.197.94:23
  • 51.###.141.86:23
  • 19#.##1.250.210:23
  • 14#.##.150.171:23
  • 10#.##7.230.187:23
  • 25#.##.153.67:23
  • 11#.##3.200.84:23
  • 22#.##1.52.194:23
  • 20#.##0.14.207:23
  • 86.###.228.132:23
  • 17#.##.42.232:23
  • 24#.##1.54.119:23
  • 22#.##2.197.27:23
  • 39.###.212.165:23
  • 16#.##8.166.177:23
  • 63.##.0.111:23
  • 97.###.68.220:23
  • 10#.##8.225.214:23
  • 11#.##.140.135:23
  • 17#.##9.118.96:23
  • 58.###.213.65:23
  • 18#.##.102.232:23
  • 22#.##.29.233:23
  • 13#.##1.120.186:23
  • 14#.##5.45.172:23
  • 96.##.124.34:23
  • 10#.##0.70.64:23
  • 17#.##.184.153:23
  • 24#.##.142.240:23
  • 66.###.204.165:23
  • 19#.##2.142.181:23
  • 10.##.177.39:23
  • 88.##1.19.25:23
  • 15#.##.42.211:23
  • 24#.##.211.127:23
  • 79.##0.43.80:23
  • 19#.##8.218.0:23
  • <LOCAL_GATE>:23
  • 64.#.#39.191:60391
  • 52.###.172.39:80
  • 38.##3.7.92:80
  • 90.##.57.122:80
  • 72.##.230.4:80
  • 12#.##5.138.158:80
  • 12#.##8.201.68:80
  • 22#.##6.27.34:80
  • 21#.##1.212.216:80
  • 35.###.230.101:80
  • 20#.##.107.164:80
  • 20#.#.187.138:80
  • 12#.##.207.101:80
  • 16#.##8.208.37:80
  • 13.##.180.20:80
  • 23#.##.223.39:80
  • 12#.##6.155.150:80
  • 82.###.60.187:80
  • 31.###.247.152:80
  • 16#.##1.104.144:80
  • 11#.##2.127.126:80
  • 21#.#3.6.252:80
  • 17#.##.13.139:80
  • 90.###.218.16:80
  • 21#.##5.227.237:80
  • 10#.##6.40.202:80
  • 19#.##7.216.255:80
  • 63.###.125.216:80
  • 41.##.126.177:80
  • 21#.##.110.113:80
  • 95.##.15.110:80
  • 54.###.237.25:80
  • 10#.##5.176.123:80
  • 96.###.175.45:80
  • 22#.##9.97.100:80
  • 16#.##6.90.32:80
  • 24.#.93.67:80
  • 15#.##.143.223:80
  • 2.###.160.127:80
  • 38.##.122.179:80
  • 24#.##.250.132:80
  • 81.###.101.82:80
  • 24#.##5.20.195:80
  • 12#.##.45.207:80
  • 10#.##5.222.49:80
  • 85.##6.79.18:80
  • 14#.##.238.161:80
  • 82.##6.122.9:80
  • 94.##8.8.247:80
  • 20#.##7.138.83:80
  • 51.###.132.220:80
  • 23#.#.29.221:80
  • 25#.#.42.71:80
  • 95.###.208.95:80
  • 16#.##0.52.145:80
  • 63.###.203.222:80
  • 17#.##8.18.254:80
  • 24#.##1.83.172:80
  • 70.##.117.95:80
  • 1.###.19.160:80
  • 13#.##8.127.147:80
  • 21#.##0.60.115:80
  • 10#.##8.232.127:80
  • 10#.##3.211.30:80
  • 10#.##9.53.107:80
  • 63.###.217.99:80
  • 62.##2.210.2:80
  • 64.##3.8.132:80
  • 24#.##7.72.227:80
  • 25#.##.194.10:80
  • 18.#.95.13:80
  • 12#.##9.231.213:80
  • 24#.##3.125.110:80
  • 12#.##3.30.47:80
  • 21#.##.249.75:80
  • 24#.##5.221.90:80
  • 65.##.184.51:80
  • 17#.##9.164.241:80
  • 69.#.123.118:80
  • 23.###.176.45:80
  • 12#.##1.226.162:80
  • 86.###.215.111:80
  • 12#.##6.58.251:80
  • 53.###.108.33:80
  • 11#.##.22.136:80
  • 18#.##.212.205:80
  • 18#.##.33.245:80
  • 19#.##.104.181:80
  • 19#.##9.169.246:80
  • 11#.##7.140.109:80
  • 88.###.123.130:80
  • 23#.##8.52.60:80
  • 15#.##3.32.46:80
  • 15#.##8.6.168:80
  • 13#.##9.168.17:80
  • 11#.##4.133.186:80
  • 19#.##2.28.238:80
  • 18#.##.100.73:80
  • 11#.#.103.236:80
  • 68.###.236.192:80
  • 12#.##4.92.199:80
  • 92.##7.21.61:80
  • 10#.##4.42.206:80
  • 44.###.89.179:80
  • 15#.##0.237.81:80
  • 15#.#0.76.89:80
  • 16#.##.165.237:80
  • 15#.##4.106.50:80
  • 2.###.68.177:80
  • 77.###.237.63:80
  • 14#.##0.83.211:80
  • 17#.##3.110.243:80
  • 71.###.137.254:80
  • 20#.##1.155.244:80
  • 52.##.123.71:80
  • 11#.##3.110.200:80
  • 69.###.198.83:80
  • 14#.##1.44.100:80
  • 24#.##5.62.67:80
  • 22#.##9.188.245:80
  • 10#.##7.216.235:80
  • 70.##1.28.32:80
  • 16#.##.114.195:80
  • 18#.##.242.183:80
  • 25#.##1.36.41:80
  • 13#.##3.25.46:80
  • 59.##.161.127:80
  • 17#.##7.252.96:80
  • 25#.##7.196.0:80
  • 88.###.55.201:80
  • 14#.##8.255.85:80
  • 17#.##6.62.186:80
  • 65.##.234.46:80
  • 34.###.95.204:80
  • 18#.##.66.137:80
  • 76.##.195.22:80
  • 15#.##5.153.250:80
  • 16#.##.64.206:80
  • 74.###.49.203:80
  • 21#.##6.248.152:80
  • 17#.##8.57.254:80
  • 77.###.150.221:80
  • 11#.##.237.206:80
  • 48.##.24.30:80
  • 25#.##9.231.237:80
  • 77.##.241.96:80
  • 83.###.24.177:80
  • 99.###.187.134:80
  • 24#.##.253.177:80
  • 12#.##.13.207:80
  • 15#.##.99.197:80
  • 40.##2.4.162:80
  • 1.##.6.215:80
  • 72.##7.4.215:80
  • 23#.#1.22.68:80
  • 43.###.131.116:80
  • 84.###.130.172:80
  • 17#.##8.198.195:80
  • 21#.##0.216.142:80
  • 19.##.32.7:80
  • 19#.##8.218.2:80
  • 19#.##8.218.3:80
  • 10#.###.175.217:21223
  • 21#.##6.209.11:23
  • 21#.##.106.203:23
  • 15#.##.240.148:23
  • 23#.#98.89.9:23
  • 21#.##7.213.29:23
  • 18#.##6.146.50:23
  • 10#.##6.71.22:23
  • 11#.##8.161.95:23
  • 21#.##0.37.140:23
  • 40.###.137.228:23
  • 25#.##8.240.212:23
  • 24#.##8.247.253:23
  • 23#.##.75.169:23
  • 21#.##6.8.251:23
  • 25#.##3.232.212:23
  • 82.##.19.211:23
  • 52.##8.33.51:23
  • 20#.##2.80.211:23
  • 15#.##.114.28:23
  • 23#.##.86.113:23
  • 18#.##.50.177:23
  • 16#.##9.46.238:23
  • 52.###.109.254:23
  • 19#.#.160.202:23
  • 83.###.180.223:23
  • 11#.##.100.220:23
  • 18#.#6.32.86:23
  • 10#.#7.87.70:23
  • 17#.##8.77.138:23
  • 18#.#4.2.248:23
  • 83.##.179.189:23
  • 15#.##8.109.251:23
  • 20#.##.116.172:23
  • 24#.#7.64.41:23
  • 61.###.111.117:23
  • 15#.##.157.249:23
  • 13#.##.104.31:23
  • 13#.#76.25.0:23
  • 15#.##7.207.66:23
  • 22#.##7.64.225:23
  • 19#.##9.133.181:23
  • 89.###.89.222:23
  • 1.###.60.128:23
  • 15#.##.212.22:23
  • 86.###.243.80:23
  • 35.###.54.133:23
  • 19#.##2.225.163:23
  • 84.###.137.175:23
  • 15#.##.182.92:23
  • 14#.##.198.24:23
  • 19.###.241.70:23
  • 40.###.44.248:23
  • 10#.##3.77.148:23
  • 54.##.35.66:23
  • 21#.#.132.255:23
  • 72.##.61.235:23
  • 16#.##5.88.39:23
  • 12#.##8.148.62:23
  • 17#.##.158.210:23
  • 17.###.221.176:23
  • 19#.##.139.243:23
  • 73.###.39.138:23
  • 69.###.134.136:23
  • 19#.##3.81.176:23
  • 25#.##7.69.143:23
  • 20#.#.127.39:23
  • 18#.##.180.253:23
  • 97.##7.244.2:23
  • 21#.##9.81.184:23
  • 85.##.103.145:23
  • 10#.##.179.31:23
  • 17#.##.123.69:23
  • 17#.#00.8.5:23
  • 10.##.6.36:23
  • 23#.##6.61.216:23
  • 13#.##3.143.218:23
  • 64.##5.9.163:23
  • 19.##.242.121:23
  • 14#.##5.10.77:23
  • 93.##.199.37:23
  • 14#.##5.71.221:23
  • 14#.##.107.49:23
  • 53.##.190.231:23
  • 18#.##6.97.35:23
  • 13#.##5.185.41:23
  • 22#.##0.136.156:23
  • 10#.##7.114.139:23
  • 77.##.155.205:23
  • 44.###.88.219:23
  • 19#.##.58.165:23
  • 10.##1.79.39:23
  • 18#.##0.14.223:23
  • 19.##.178.244:23
  • 23#.##1.8.125:23
  • 16#.#60.6.15:23
  • 97.##.148.175:23
  • 25#.##1.34.33:23
  • 60.##.31.36:23
  • 83.##.225.116:23
  • 54.##.167.111:23
  • 21#.##6.55.168:23
  • 20#.#.19.44:23
  • 23#.##.135.224:23
  • 14#.##.115.47:23
  • 98.###.172.32:23
  • 23#.##1.254.255:23
  • 16#.##.79.214:23
  • 10#.##2.250.24:23
  • 24#.##5.133.168:23
  • 18#.##1.171.114:23
  • 16#.##.172.108:23
  • 75.##.14.230:23
  • 14#.##5.88.98:23
  • 11#.##8.169.105:23
  • 98.###.255.42:23
  • 13#.##.242.88:23
  • 80.###.205.140:23
  • 21#.##.114.34:23
  • 20#.##2.235.128:23
  • 18#.##6.222.182:23
  • 80.##.94.180:23
  • 82.##.121.48:23
  • 10#.##.171.92:23
  • 2.#.#24.115:23
  • 16#.##6.53.177:23
  • 59.###.192.94:23
  • 27.###.132.129:23
  • 10.###.158.40:23
  • 14#.##8.91.57:23
  • 14#.##9.153.247:23
  • 20#.##7.67.226:23
  • 25#.##.101.225:23
  • 70.###.11.231:23
  • 90.##.31.28:23
  • 40.###.14.147:23
  • 15#.##.145.187:23
  • 14#.##5.16.209:23
  • 91.###.130.42:23
  • 14#.##7.253.245:23
  • 73.##.101.99:23
  • 45.###.61.236:23
  • 13#.##0.15.43:23
  • 15#.##1.104.214:23
  • 84.###.65.195:23
  • 16#.##1.236.81:23
  • 20#.##4.185.231:23
  • 14#.#.120.84:23
  • 83.##.18.76:23
  • 17#.##5.35.11:23
  • 43.##.13.40:23
  • 23.##0.18.2:23
  • 73.###.25.145:23
  • 13#.##2.83.230:23
  • 57.##.236.112:23
  • 15#.#5.73.34:23
  • 24#.##9.10.175:23
  • 13#.##6.209.199:23
  • 22#.##4.68.224:23
  • 22#.##.133.210:23
  • 10#.##.183.80:23
  • 19#.##8.218.4:23
  • 19#.##8.218.5:23
Receives data from the following servers:
  • 14#.##1.121.134:23

Curing recommendations


Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

One month (no registration) or three months (registration and renewal discount)

Download Dr.Web

Download by serial number