Linux.Packed.98

Technical Information

Malicious functions:

Removes itself

Modifies firewall settings:

iptables -I INPUT -p udp -m udp --dport 11240 -j ACCEPT

Network activity:

Awaits incoming connections on ports:

127.0.0.1:22480
0.0.0.0:11240

Establishes connection:

8.#.8.8:53
[:##]:11240
127.0.0.1:11240
20#.##6.124.255:80

HTTP GET requests:

http://##.##.232.190/

Sends data to the following servers:

66.###.186.126:21120
22#.##6.184.221:23
61.##0.40.95:23
11#.##8.133.156:23
17#.##6.247.45:23
10#.##9.99.174:23
17#.##2.248.149:23
95.##.219.170:23
36.##.163.160:23
63.##.128.206:23
15#.##.214.108:23
52.##.224.192:23
14#.#.81.111:23
20#.##0.105.24:23
19#.##.123.231:23
71.##.64.233:23
39.###.42.152:23
71.##2.98.36:23
83.###.60.103:23
67.###.250.230:23
24#.##.177.228:23
12.##6.58.38:23
70.##.18.44:23
16#.##5.16.224:23
24#.##2.189.130:23
13.###.11.184:23
24#.##.80.176:23
13#.##5.248.29:23
14#.##0.149.232:23
22#.##4.63.12:23
24#.##9.37.144:23
22#.##.250.26:23
23#.##.102.204:23
24#.##.105.110:23
48.###.201.244:23
66.##.85.22:23
20#.##0.30.132:23
11#.##6.55.102:23
34.###.28.131:23
69.###.230.242:23
21#.##2.212.217:23
18#.##6.226.204:23
20#.##6.252.251:23
2.##.105.160:23
77.###.194.252:23
87.###.207.119:23
15#.##1.189.65:23
1.###.56.148:23
13#.#3.93.52:23
9.###.147.72:23
13#.##1.20.141:23
18#.##6.203.161:23
19#.##.172.30:23
21#.##7.107.97:23
19#.##8.68.210:23
14#.##7.173.221:23
88.##3.63.90:23
12#.#8.27.34:23
13#.##0.220.109:23
91.###.190.205:23
50.###.110.103:23
24#.##.134.156:23
98.###.241.23:23
31.###.237.202:23
5.###.152.190:23
24#.#.79.169:23
22#.##7.206.178:23
24#.##2.206.159:23
24#.##9.2.125:23
32.##6.9.226:23
24#.#9.25.14:23
10#.##3.156.238:23
24#.##.58.173:23
24#.##7.14.59:23
20#.##2.4.240:23
98.#.241.158:23
31.##.187.114:23
16#.#6.7.212:23
78.##.131.177:23
76.###.133.194:23
10.###.161.113:23
23#.##.46.106:23
81.###.170.149:23
23#.##.198.106:23
11#.##6.233.62:23
19.##.117.174:23
18#.##5.121.116:23
22#.##5.148.251:23
21#.##8.114.210:23
50.##4.31.95:23
95.###.209.155:23
12#.##.253.239:23
61.##.225.56:23
10#.##6.68.211:23
37.##.83.4:23
66.###.108.21:23
72.##7.28.21:23
23#.##1.160.100:23
64.###.203.218:23
12#.##1.32.14:23
16#.##3.6.111:23
18#.##8.191.251:23
23#.##.172.64:23
95.###.243.93:23
11#.##.163.21:23
14#.##1.71.199:23
19#.##6.86.244:23
19#.##.82.136:23
22#.##0.237.98:23
11#.##3.25.130:23
62.###.215.251:23
17#.##7.89.90:23
79.##.118.246:23
14#.##5.148.197:23
12#.##0.85.21:23
10#.##8.190.135:23
18#.#.121.2:23
98.###.252.19:23
11#.##8.97.236:23
53.###.236.224:23
38.##.96.31:23
35.##.142.214:23
96.##6.14.58:23
19#.##0.238.14:23
17#.#.221.175:23
11#.##8.26.146:23
20.##.135.194:23
24#.##4.157.161:23
95.###.185.94:23
13#.##7.167.118:23
12#.##.64.119:23
25#.##2.113.59:23
12#.##9.65.217:23
10#.##.207.148:23
48.###.28.193:23
23#.##.127.116:23
66.###.212.207:23
14#.##1.39.229:23
48.###.238.85:23
20#.##.21.246:23
10#.##.45.250:23
79.##8.208.9:23
13.###.236.89:23
16#.##0.86.98:23
61.###.101.151:23
13#.##.226.247:23
17.##8.18.88:23
21#.##4.10.63:23
36.##.23.124:23
10#.##6.154.28:23
12#.##1.12.182:23
12#.##8.148.221:23
18#.##.198.93:23
86.##7.89.10:23
10#.##.118.200:23
13#.##5.147.124:23
85.###.93.236:23
18#.##2.86.17:23
24#.##4.30.98:23
13#.##4.252.127:23
15#.##.153.159:23
19#.##8.200.0:23
<LOCAL_GATE>:23
22#.##.148.28:57517
24#.##.25.203:23
16#.##.245.122:23
91.##.93.102:23
81.##.59.65:23
74.###.36.229:23
14#.##.195.117:23
18#.##1.72.57:23
20#.##3.26.40:23
16#.##6.114.172:23
17.##.148.156:23
11#.#6.94.31:23
22#.##4.72.41:23
14#.##1.36.83:23
14#.#04.7.41:23
14#.##.196.72:23
21#.##.232.184:23
24#.##9.110.71:23
16#.##.100.195:23
10#.##.77.150:23
35.###.125.82:23
19#.##2.127.185:23
23#.##9.84.137:23
10#.##0.62.164:23
18#.##.125.240:23
10#.##2.141.222:23
5.##.32.40:23
17#.##0.92.91:23
10#.##7.188.147:23
10#.##3.114.122:23
12#.##4.243.74:23
23#.##5.110.248:23
11#.##4.40.177:23
21#.##.99.253:23
61.###.89.186:23
20#.##6.99.221:23
20#.##1.171.94:23
17#.##.13.104:23
77.###.181.19:23
14#.##.96.224:23
16#.##.177.225:23
24#.##6.135.59:23
19#.##7.193.84:23
88.##6.52.24:23
51.###.228.79:23
17#.##9.125.207:23
48.###.106.43:23
14#.##.193.200:23
19#.##9.241.94:23
12#.##.242.239:23
10#.##.71.246:23
67.##.225.212:23
12#.##0.46.254:23
65.##.128.7:23
37.##.200.20:23
23#.##.129.126:23
19#.##2.8.204:23
17#.##.203.182:23
75.##.239.33:23
12.##.216.83:23
23.###.24.218:23
42.###.93.206:23
88.##.137.35:23
17#.##7.10.198:23
65.###.212.30:23
14#.##7.252.203:23
16#.##6.244.206:23
19#.##6.196.102:23
47.##.224.46:23
49.##.23.67:23
25.###.253.255:23
17#.##0.54.164:23
23#.##5.243.35:23
20#.##2.105.148:23
20#.##4.9.113:23
12#.##3.244.20:23
86.##.124.57:23
17#.##7.16.81:23
13#.##7.72.193:23
72.###.79.155:23
16#.##2.114.236:23
10#.##.12.247:23
20#.##9.197.124:23
20#.##1.180.153:23
40.###.209.12:23
17#.##.100.148:23
19#.##7.252.155:23
14#.##4.145.2:23
25.###.67.159:23
31.##.48.6:23
23#.##9.72.138:23
18#.##0.57.71:23
64.###.45.192:23
18#.##.40.181:23
35.##.210.57:23
24#.##5.199.128:23
68.###.21.187:23
13#.##4.39.140:23
21#.##.111.181:23
12#.##.54.167:23
17#.##8.41.231:23
14#.#5.68.84:23
46.##5.35.52:23
20#.##4.37.191:23
14#.##0.136.168:23
91.###.38.190:23
15#.#5.69.1:23
16#.##5.3.128:23
76.##.62.212:23
24#.##9.186.19:23
17#.##9.193.181:23
22#.##8.51.160:23
13#.##7.179.73:23
20.##6.19.25:23
41.###.241.16:23
10#.#.30.253:23
19#.##8.13.241:23
88.##.115.127:23
12#.##.71.204:23
16#.#87.67.0:23
11#.##5.11.13:23
12#.##.173.215:23
24#.##5.242.154:23
21#.##9.87.158:23
24#.##0.195.216:23
35.###.55.233:23
63.###.181.107:23
25.##.1.44:23
22#.##6.93.120:23
24#.##6.106.226:23
54.###.166.199:23
16#.##3.18.28:23
19#.##9.134.65:23
18#.##3.228.189:23
16#.##1.237.42:23
74.###.73.157:23
47.###.230.25:23
13#.##.136.101:23
11#.##4.250.167:23
59.##.109.188:23
16#.##5.209.44:23
70.##6.33.11:23
73.##.64.54:23
25.###.130.118:23
23#.#6.7.49:23
11#.##3.229.252:23
24#.##9.175.86:23
51.###.99.154:23
23#.##5.96.39:23
12#.##4.112.95:23
22#.##0.178.95:23
16#.##.33.142:23
13#.##.190.225:23
41.###.89.223:23
61.##.3.249:23
49.###.158.185:23
17#.##3.151.228:23
16#.##.172.59:23
52.##.237.203:23
77.##.156.45:23
12#.##8.139.112:23
19#.##8.200.2:23
19#.##8.200.3:23
11#.###.184.132:30907
25#.##9.254.208:80
12#.##6.206.64:80
14#.##2.221.91:80
99.###.110.211:80
12#.##7.69.214:80
13#.##2.205.41:80
21#.##.29.248:80
89.##.7.137:80
39.###.137.74:80
24#.##.239.228:80
14#.##.60.124:80
23#.##.168.100:80
15#.##9.149.174:80
11#.##.160.85:80
27.###.26.251:80
92.##.36.66:80
34.##3.79.14:80
24#.##.67.127:80
17.##.201.178:80
13#.##1.106.246:80
12.##7.4.65:80
16#.#.76.57:80
18#.##.125.116:80
50.###.202.228:80
14#.##6.240.201:80
18#.##.10.147:80
12#.##7.143.165:80
24#.##.98.201:80
23.##.206.211:80
22#.##4.28.189:80
15#.##6.45.11:80
95.##.167.50:80
19.##.139.121:80
68.##7.63.17:80
15#.##.78.192:80
15#.##6.239.108:80
18#.##.70.211:80
19#.##4.172.64:80
34.###.200.109:80
17#.##.136.31:80
10#.##7.20.183:80
24#.##6.157.94:80
10#.#5.61.10:80
10#.#0.7.76:80
20#.##0.159.52:80
84.###.234.192:80
15#.#54.0.16:80
16#.##.64.118:80
10#.##6.49.43:80
18#.#9.83.38:80
19#.##.252.233:80
17.##.210.2:80
18#.##6.102.57:80
12#.##6.223.231:80
17#.##8.137.92:80
11#.##0.227.148:80
99.###.174.120:80
36.##.109.83:80
64.##.13.165:80
87.###.239.244:80
59.###.229.131:80
10#.#7.6.234:80
15#.##.94.168:80
14#.##.194.104:80
18#.##2.61.97:80
13#.##4.225.123:80
18#.##7.52.142:80
66.##.128.69:80
18#.##.72.239:80
13#.##0.168.90:80
20#.##3.69.230:80
22#.##.100.79:80
16#.##1.143.165:80
20#.##7.92.55:80
22#.##.45.127:80
10#.##5.169.191:80
39.##3.176.4:80
17#.##4.6.124:80
23#.##8.251.254:80
41.##.159.211:80
12#.##6.221.79:80
78.##2.4.91:80
13#.##7.57.179:80
16#.##2.197.56:80
15#.#2.69.88:80
18#.##.107.127:80
73.###.244.235:80
15#.##.255.223:80
12#.##9.245.182:80
10#.##.14.140:80
24#.#01.54.1:80
25#.#.91.64:80
43.##.158.68:80
43.##.94.226:80
53.##.32.38:80
22#.#0.66.27:80
92.###.195.130:80
19#.##5.232.95:80
10#.##7.55.34:80
20#.##6.124.255:80
54.###.193.17:80
2.#.#9.96:80
86.##.132.119:80
15#.##0.132.33:80
21#.##6.103.154:80
43.###.138.87:80
1.###.212.127:80
45.###.80.109:80
16#.##.195.111:80
19#.##4.253.232:80
14#.#46.10.1:80
11#.##.92.225:80
16#.#4.18.95:80
94.##.213.128:80
11#.##3.57.137:80
58.###.60.233:80
13#.##2.25.111:80
72.###.196.240:80
19#.##2.44.27:80
21#.##.25.139:80
23#.##.227.94:80
51.##.215.18:80
20#.##3.127.223:80
67.###.224.180:80
15#.##7.229.174:80
21#.##0.133.30:80
23#.##8.28.237:80
53.###.71.216:80
5.###.18.183:80
18#.#6.31.40:80
22#.##.130.166:80
20#.##1.191.214:80
18#.##2.180.158:80
19#.#1.34.21:80
25#.##1.236.173:80
5.###.124.216:80
23#.##3.152.172:80
15#.#.154.118:80
89.##.198.115:80
18#.##.111.50:80
13#.#.241.186:80
5.###.201.156:80
49.###.189.176:80
17#.##6.69.174:80
21#.##.161.97:80
24#.##.211.57:80
82.##.244.98:80
80.##.16.123:80
22#.##2.177.39:80
65.##.178.233:80
19#.#7.50.14:80
14#.#0.91.62:80
22#.##6.71.92:80
86.###.162.203:80
21#.##.167.207:80
10#.##7.160.83:80
23#.#3.5.180:80
19#.#16.67.0:80
16#.##1.146.79:80
19#.##8.200.4:80
19#.##8.200.5:80
46.###.133.181:39642
47.#.#30.15:8080
66.##.206.209:8080
54.##.130.201:8080
22#.##.63.95:8080
60.###.87.167:8080
18#.###.237.236:8080
23#.##.87.175:8080
77.##.159.116:8080
16#.###.180.214:8080
24#.##1.96.155:8080
14#.##5.75.242:8080
11#.##.252.105:8080
13#.##5.37.189:8080
25#.##5.42.211:8080
23#.##9.202.81:8080
64.###.245.121:8080
22#.##5.5.51:8080
48.##.63.50:8080
61.##.237.55:8080
70.###.104.78:8080
22#.##.183.118:8080
15#.##9.77.203:8080
19#.##.51.73:8080
10#.##1.73.197:8080
19#.##.28.172:8080
11#.##.199.55:8080
13#.##.213.207:8080
21#.##.178.131:8080
18#.##2.5.54:8080
27.##.181.161:8080
24.##.152.228:8080
23#.##0.73.2:8080
82.###.59.209:8080
94.##.29.108:8080
89.###.89.102:8080
73.###.254.21:8080
16#.##2.77.178:8080
17#.###.103.239:8080
79.###.41.19:8080
10#.###.158.210:8080
70.##.165.51:8080
18.##.134.182:8080
18#.###.232.223:8080
66.##.202.57:8080
83.###.249.72:8080
99.###.127.63:8080
27.##.39.188:8080
84.###.97.203:8080
12#.##.63.180:8080
63.###.144.11:8080
11#.##.111.24:8080
1.##.#46.243:8080
13#.##.66.1:8080
79.##.141.215:8080
16#.##.196.148:8080
25.##.211.18:8080
22#.##9.140.78:8080
1.###.251.25:8080
17#.#.60.108:8080
24#.##.103.226:8080
21#.##.26.101:8080
15#.##0.28.66:8080
19#.##2.64.216:8080
24#.##4.35.185:8080
10#.##3.56.70:8080
49.###.91.1:8080
11#.##.154.180:8080
48.##.101.11:8080
23#.##3.123.6:8080
20#.##.66.124:8080
15#.##.223.149:8080
11#.##.91.187:8080
11#.##5.212.39:8080
17#.###.235.196:8080
13#.##6.120.37:8080
94.###.82.112:8080
19.##.197.45:8080
91.###.116.24:8080
47.###.211.12:8080
12#.##.215.0:8080
19.###.102.31:8080
16#.##4.235.89:8080
80.###.147.209:8080
23#.###.128.253:8080
25#.##.133.191:8080
18#.##.173.211:8080
74.###.123.198:8080
17#.#.128.61:8080
4.##.#00.141:8080
22#.##.89.103:8080
97.###.223.30:8080
12#.##.233.227:8080
15#.##.80.129:8080
21#.#.173.187:8080
34.###.91.116:8080
41.#.#3.194:8080
16#.###.145.187:8080
19#.##.49.168:8080
19#.##2.161.59:8080
2.##.#32.67:8080
21#.##.22.73:8080
59.##.189.12:8080
13#.#.211.54:8080
99.##.179.252:8080
73.###.54.159:8080
43.##.109.160:8080
16#.##1.121.66:8080
25#.##5.237.5:8080
25#.##.188.4:8080
10#.##0.142.62:8080
47.#.#9.236:8080
18#.##.11.100:8080
13#.##.9.107:8080
58.##.62.24:8080
70.###.55.156:8080
13.###.108.32:8080
15#.##0.91.46:8080
13#.###.241.146:8080
14#.##7.17.149:8080
89.###.166.1:8080
2.##.#46.163:8080
11#.###.114.186:8080
13#.##.0.17:8080
11#.###.212.185:8080
23.##.45.21:8080
13#.###.172.148:8080
20#.###.183.184:8080
86.###.140.59:8080
14#.##9.68.138:8080
43.###.46.176:8080
84.###.110.15:8080
20#.##.127.21:8080
19#.##6.115.7:8080
11#.###.168.111:8080
74.###.112.125:8080
24#.##4.40.126:8080
17#.##8.119.0:8080
14#.#.88.103:8080
21#.##3.141.86:8080
16#.##4.56.212:8080
12#.##.75.144:8080
88.###.88.170:8080
98.###.104.223:8080
25#.##.211.157:8080
15#.##.221.2:8080
15#.#.8.65:8080
20#.##.174.16:8080
43.###.212.95:8080
25#.##.107.97:8080
12#.##2.181.79:8080
10#.##.213.99:8080
12#.##.162.32:8080
23#.##7.195.45:8080
77.###.189.200:8080
81.###.21.233:8080
19#.##.143.86:8080
13#.##4.96.179:8080
36.###.202.141:8080
24#.###.125.227:8080
24#.##.36.214:8080
19#.##8.200.6:8080
19#.##8.200.7:8080

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations