Linux.Siggen.1312

Technical Information

Malicious functions:

Removes itself

Substitutes application name for:

gci63JdJgwX8mF2avf1QSWO7LCVOHmjasN3eFIgD

Kills the following processes:

run.sh

Network activity:

Establishes connection:

8.#.8.8:53
87.###.82.211:54358

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

DNS ASK:

cn#.#yton.wtf

Sends data to the following servers:

77.###.248.243:23
78.##.29.209:23
18#.##3.19.246:23
15#.##.16.171:23
19#.##.236.201:23
60.##6.39.78:23
17#.##5.155.153:23
17#.##2.126.133:23
93.###.250.40:23
17.###.191.231:23
19#.##6.61.234:23
72.##6.6.54:23
15#.##1.76.47:23
12#.##5.73.26:23
41.##6.20.79:23
15#.##7.208.112:23
46.##.50.184:23
88.##.187.56:23
14#.##.201.226:23
64.##.98.193:23
76.###.87.190:23
14.##.206.211:23
13#.##.229.32:23
32.###.230.105:23
79.##.245.52:23
13#.##6.41.96:23
13#.##8.59.235:23
80.##.35.65:23
69.##.192.201:23
17#.##.204.26:23
16#.##8.216.116:23
78.###.126.230:23
35.##5.1.61:23
10#.#7.77.80:23
19#.##.222.139:23
74.###.239.118:23
8.###.163.180:23
10#.##.182.74:23
15#.#6.245.4:23
15#.##3.157.37:23
13#.##7.124.199:23
10#.#3.26.65:23
15#.##3.158.221:23
12#.##3.124.136:23
75.###.200.20:23
12#.#0.85.19:23
22#.##6.166.251:23
31.###.217.211:23
70.###.178.20:23
11#.##7.44.196:23
42.##0.45.20:23
19#.##.168.240:23
15#.##6.73.246:23
12#.##7.189.106:23
12#.#.186.61:23
47.##1.212.5:23
99.##.150.246:23
18#.##0.103.237:23
22#.##8.204.77:23
17#.#.68.77:23
18#.##.237.189:23
21#.#9.7.181:23
44.##5.44.63:23
19#.##8.241.201:23
44.##.234.69:23
96.###.255.95:23
13#.##.227.80:23
93.##.39.5:23
65.###.154.163:23
43.###.38.115:23
16#.##9.225.86:23
18#.##6.22.16:23
15#.##9.95.208:23
23.###.192.133:23
15#.##.252.108:23
20#.#85.9.40:23
41.###.65.174:23
17#.##3.155.83:23
16#.##.63.254:23
18#.##9.140.9:23
17.##.182.225:23
99.###.93.174:23
22#.#2.39.25:23
8.##.56.42:23
17#.##1.0.209:23
2.###.231.219:23
90.###.22.231:23
10#.##.118.173:23
10#.##9.215.127:23
21#.##.208.90:23
20#.##.248.184:23
78.##.156.247:23
17#.##.63.113:23
12#.##.222.170:23
21#.##.25.180:23
57.###.12.165:23
15#.##.203.146:23
17#.##.246.227:23
11#.##1.94.175:23
14#.##6.132.182:23
21#.##2.9.104:23
70.##.227.197:23
14#.##1.66.92:23
17#.#8.11.35:23
10#.##.183.110:23
13#.##4.204.221:23
17#.##4.119.57:23
20#.##.138.103:23
31.###.124.255:23
41.###.113.222:23
96.##4.6.243:23
15#.##2.104.178:23
57.###.38.244:23
13#.##5.191.178:23
17#.##0.141.145:23
12#.##.30.182:23
90.##.182.245:23
12#.##6.176.106:23
15#.##5.58.152:23
97.###.32.208:23
46.###.238.215:23
18#.##.40.109:23
14#.##6.83.78:23
20#.##.52.123:23
12#.##2.184.234:23
84.###.215.146:23
19#.##.176.159:23
66.##.88.19:23
68.###.134.41:23
11#.##9.21.214:23
36.###.195.40:23
10#.##.127.145:23
14#.##0.118.64:23
25.##1.74.2:23
18#.##.25.224:23
23.###.161.143:23
10#.##5.233.71:23
11#.##6.69.182:23
18#.##0.43.230:23
19.##.244.51:23
17#.#3.1.206:23
80.###.163.37:23
44.###.103.26:23
21#.##6.60.128:23
77.##.0.67:23
4.##.56.160:23
18.###.169.95:23
12.###.225.171:23
5.###.104.70:23
31.##.70.39:23
89.##.159.131:23
13#.##.49.194:23
12#.##9.156.202:23
21#.##7.15.224:23
18#.##.246.113:23
12#.##.141.46:23
79.##1.89.66:23
97.###.115.176:23
90.###.89.242:23
34.##.27.132:23
14.##.145.121:23
11#.#9.80.12:23
18#.#30.44.8:23
19#.#.32.234:23
11#.##5.164.248:23
19#.##7.42.205:23
20#.##9.96.63:23
22#.##2.180.182:23
49.###.132.103:23
10#.##1.135.130:23
10#.##3.52.131:23
10#.#33.6.20:23
19#.##5.28.225:23
22#.#.152.80:23
17#.##7.31.61:23
68.###.176.106:23
18#.##.229.73:23
11#.#64.2.43:23
86.###.159.119:23
74.###.144.183:23
13#.##8.162.16:23
16#.##6.135.233:23
17#.##.163.150:23
11#.##.124.84:23
70.##.243.20:23
89.###.29.255:23
1.###.30.57:23
77.##1.153.2:23
19.###.45.119:23
2.###.180.11:23
19#.##.62.185:23
69.##.171.13:23
14#.##1.192.207:23
11#.##3.56.104:23
14#.##.210.240:23
14#.##4.172.132:23
16#.##5.88.74:23
19#.##3.81.36:23
98.###.196.231:23
10#.##3.201.118:23
15#.##1.148.59:23
14#.##0.204.186:23
17#.##.211.59:23
19#.##.90.103:23
52.###.76.111:23
14#.##2.134.158:23
20.###.86.131:23
12#.##.130.227:23
16#.##1.141.77:23
12#.##9.204.241:23
14#.##2.84.115:23
19#.##0.70.129:23
18#.##1.61.33:23
18#.##.230.232:23
20#.##6.127.47:23
62.###.22.223:23
98.###.102.204:23
13#.##9.129.175:23
20#.##1.69.245:23
20#.##9.217.107:23
13#.##7.124.131:23
94.##.119.187:23
53.##8.41.0:23
18#.##1.95.120:23
14#.##3.50.173:23
17#.##.170.84:23
15#.##5.127.3:23
87.##0.8.173:23
89.##.242.150:23
19#.##0.26.194:23
46.#.113.219:23
15#.##0.227.21:23
2.###.189.228:23
31.###.88.171:23
16#.##7.133.224:23
77.###.27.141:23
24.###.137.110:23
19#.##.139.122:23
19#.##.245.46:23
20#.##9.27.236:23
18#.##9.176.45:23
19#.##7.36.169:23
67.##.90.148:23
54.###.74.219:23
16#.##8.3.129:23
47.###.163.160:23
14#.##9.190.149:23
89.##6.59.32:23
21#.##7.152.97:23
98.###.152.246:23
17#.##.120.156:23
45.###.126.46:23
86.##.75.126:23
18#.##7.123.145:23
22#.#2.75.69:23
98.##.106.79:23
17#.#6.8.231:23
12#.##6.28.103:23
16#.##2.12.117:23
20#.##.126.65:23
20#.##3.20.188:23
14#.##6.150.88:23
39.##.179.0:23
20#.##1.169.127:23
73.###.44.248:23
12#.##.240.90:23
72.##.37.213:23
10#.##6.59.64:23
61.###.234.220:23
12#.##.195.88:23
14#.##2.169.214:23
21#.##4.229.79:23
21#.##5.118.34:23
16#.##5.223.151:23
17#.##8.221.182:23
11#.##.46.234:23
16#.##.202.143:23
51.###.211.182:23
20#.##4.131.245:23
12#.##8.68.197:23
21#.##1.80.214:23
21#.##4.177.118:23
20#.##.130.104:23
64.##.227.68:23
75.###.90.237:23
67.###.34.171:23
11#.##.199.86:23
14#.##.100.209:23
16#.##.170.165:23
42.##.199.60:23
21#.##8.126.68:23
10#.##3.134.189:23
11#.#26.9.39:23
12#.#.174.27:23
39.###.157.141:23
63.###.215.53:23
10#.##.59.207:23
15#.##3.214.38:23
12#.##6.121.218:23
11#.##.128.199:23
13#.##9.124.229:23
12.##.249.113:23
79.###.117.111:23
10#.##4.193.12:23
17#.##7.83.137:23
83.###.210.246:23
47.###.15.239:23
22#.##.67.198:23
13.###.189.51:23
15#.#8.21.78:23
12#.##5.225.49:23
35.##.147.35:23
21#.##.112.162:23
43.###.148.126:23
20#.##.131.121:23
10#.#7.206.9:23
11#.##7.126.128:23
23.##.42.185:23
17#.##1.70.20:23
15#.##1.41.128:23
36.##5.214.0:23
39.###.194.164:23
11#.##.157.53:23
91.###.104.104:23
11#.##.95.121:23
21#.#4.21.6:23
11#.##3.11.137:23
10#.##.237.83:23
19#.#.127.53:23
87.###.242.225:23
17#.##.109.132:23
22#.##4.82.199:23
43.##.207.168:23
11#.##.236.126:23
13#.##7.169.187:23
38.##.67.223:23
49.###.172.119:23
11#.##3.254.43:23
14#.##3.208.112:23
22#.##.201.209:23
10#.##.230.13:23
14#.##.99.142:23
13.###.254.45:23
18#.##.191.22:23
89.###.160.40:23
14#.##4.225.226:23
13#.##.104.11:23
18#.##7.59.210:23
35.###.167.112:23
19#.##4.22.216:23
14#.##5.152.175:23
88.##3.9.110:23
17#.##4.248.161:23
18#.##5.18.52:23
13#.##.192.52:23
11#.##.237.191:23
44.###.123.185:23
17#.##3.164.137:23
14#.##.193.53:23
11#.##.89.255:23
18.##8.92.35:23
73.##.146.59:23
79.###.228.195:23
4.###.197.149:23
19#.##7.231.182:23
12#.##9.214.221:23
1.###.200.13:23
10#.##.161.24:23
12#.##4.67.54:23
13#.##3.128.196:23
18#.##2.184.146:23
79.##5.18.55:23
92.###.160.107:23
72.##.170.119:23
10#.##1.171.183:23
12#.##.110.40:23
9.###.87.239:23
17#.#.183.97:23
42.##.111.46:23
11#.##3.159.250:23
18#.##4.123.155:23
15#.#09.68.4:23
60.###.50.110:23
54.###.50.231:23
16#.##6.187.69:23
72.###.58.149:23
16#.##2.26.204:23
98.##.106.105:23
44.##1.58.50:23
97.##.219.208:23
14#.##9.206.252:23
13#.##.57.130:23
21#.##0.81.91:23
4.##.10.24:23
73.##.135.210:23
16#.##9.180.104:23
20.###.207.168:23
19.###.115.34:23
20.##4.6.214:23
44.##.157.89:23
10#.##.13.135:23
53.###.70.234:23
44.##.223.176:23
39.###.98.206:23
17#.##9.48.245:23
22#.##0.113.213:23
20.###.239.195:23
83.###.162.72:23
84.##.140.40:23
40.##.238.93:23
20#.##8.83.217:23
18#.##8.207.185:23
82.##.149.108:23
13.##9.23.68:23
20#.##7.110.65:23
99.###.183.127:23
39.###.108.104:23
12#.##0.243.178:23
23.##.205.51:23
94.##3.8.51:23
13#.##.236.39:23
73.##.26.15:23
21#.##.239.139:23
12#.##5.116.53:23
16#.##1.108.168:23
66.##0.33.56:23
21#.##.46.245:23
89.###.198.171:23
80.##.170.240:23
99.###.244.110:23
93.##4.15.14:23
49.###.141.71:23
69.##.155.51:23
78.##.75.107:23
14#.##9.238.94:23
11#.#.4.181:23
98.##7.38.89:23
21#.##2.244.126:23
22#.##7.54.188:23
27.##.68.168:23
18#.##.73.193:23
17#.##5.187.65:23
16#.##9.91.86:23
49.##.68.40:23
17#.##6.198.57:23
2.###.85.251:23
18#.##9.116.250:23
42.###.11.157:23
32.###.116.141:23
5.###.41.9:23
10#.##9.95.218:23
14#.##0.74.183:23
13#.##.160.111:23
88.##.240.93:23
87.##.66.105:23
15#.##.244.208:23
64.###.250.244:23
13#.##3.248.2:23
20#.##.203.213:23
13#.##.108.138:23
8.###.62.86:23
19#.##2.42.171:23
14#.##4.218.123:23
11#.##7.45.203:23
14#.##.224.114:23
14#.##1.249.182:23
4.###.210.6:23
54.###.143.178:23
16#.#2.9.49:23
13#.##.111.179:23
61.##.151.179:23
17#.##.210.239:23
17#.##.128.72:23
17#.##.110.94:23
18#.##0.241.141:23
45.###.125.200:23
20#.##6.43.189:23
69.##1.2.42:23
12#.##0.252.62:23
17#.##.104.201:23
21#.##4.145.80:23
53.##.144.132:23
18#.##0.231.66:23
49.##.206.196:23
18#.##9.236.135:23
46.###.95.250:23
96.###.189.223:23
69.##.52.35:23
21#.#9.7.225:23
19#.##1.33.166:23
34.###.117.206:23
13#.##9.196.31:23
11#.##.172.35:23
12#.##0.137.88:23
20#.##7.51.83:23
17#.##3.42.139:23
15#.##5.51.142:23
1.###.214.246:23
53.##.228.157:23
14#.##1.232.156:23
60.###.129.157:23
95.##.139.83:23
10#.##5.245.123:23
21#.##3.71.209:23
9.###.182.91:23
21#.##7.111.213:23
61.###.246.173:23
19#.##.111.138:23
50.###.197.190:23
2.##.212.171:23
22#.##7.18.157:23
14#.#6.49.51:23
17#.##7.214.235:23
19#.##.193.57:23
18#.##.75.230:23
10#.##0.137.15:23
16#.##9.199.255:23
47.###.60.243:23
14.##.87.155:23
18#.##1.55.23:23
94.##.140.34:23
50.##.160.226:23
75.##2.62.6:23
10#.##2.215.116:23
17#.##2.78.192:23
21#.##.100.138:23
76.##3.37.16:23
20#.##.183.57:23
58.##.193.201:23
20#.##.118.119:23
27.###.60.142:23
12#.##5.206.135:23
16#.##2.13.36:23
21#.#4.85.86:23
2.###.9.126:23
74.###.23.136:23
42.###.23.122:23
34.###.185.251:23
16#.##8.57.163:23
16#.##.148.255:23
11#.##2.5.194:23
20#.##3.152.165:23
79.###.130.55:23
99.##.255.191:23
13#.##.59.192:23
21#.##.221.99:23
60.###.117.204:23
19#.##0.91.157:23
89.###.230.255:23
2.##.204.140:23
75.###.155.19:23
10#.##4.57.211:23
19#.##8.21.228:23
13#.##0.193.222:23
82.###.212.28:23
10#.##.169.35:23
60.###.230.185:23
10#.##.177.128:23
19#.##.107.31:23
17#.##1.29.175:23
24.###.202.199:23
67.##.88.156:23
18#.##.145.68:23
21#.##7.246.96:23
70.###.50.249:23
13#.##.112.147:23
19#.#.253.81:23
17.##.38.238:23
59.##8.236.8:23
18#.##.104.81:23
14#.##9.98.138:23
17#.##4.31.153:23
39.###.47.214:23
76.##.131.80:23
18#.#.180.93:23
13#.##0.55.38:23
17#.##7.146.174:23
21#.##.59.152:23
18#.##3.240.7:23
12#.#6.1.198:23
13#.##8.110.198:23
15#.##.20.109:23
10#.##2.235.140:23
17#.#4.98.60:23
19#.##8.114.217:23
18#.##9.232.111:23
83.###.31.110:23
61.###.219.27:23
10#.##8.193.152:23
88.##.239.126:23
88.##.146.127:23
21#.##1.53.208:23
18#.##.246.42:23
98.##.23.236:23
74.#.140.122:23
48.#.36.165:23
17#.##.100.41:23
19#.##6.67.147:23
69.##.23.124:23
81.###.179.30:23
19.###.252.101:23
17#.##.211.164:23
16#.#.18.188:23
12#.##.238.24:23
17#.##.220.13:23
19#.##4.25.178:23
1.##.152.104:23
1.###.250.203:23
18#.##2.38.59:23
58.###.106.110:23
22#.##1.118.19:23
18#.#6.83.52:23
13#.##8.140.71:23
12#.##.135.143:23
48.###.38.221:23
85.###.252.175:23
42.###.40.104:23
79.###.92.208:23
13#.##.178.200:23
25.###.223.58:23
15#.##.246.253:23
12#.##4.39.179:23
19#.##7.90.214:23
12#.##6.82.160:23
19#.##.32.157:23
11#.##0.74.80:23
11#.#.206.244:23
70.###.75.123:23
73.###.101.240:23
13#.##0.188.16:23
10#.##1.224.31:23
47.###.48.155:23
11#.##.59.107:23
75.##.187.83:23
15#.##.46.193:23
82.###.211.206:23
75.##.151.54:23
10#.##5.250.229:23
60.##6.92.14:23
77.##.16.251:23
90.##.166.252:23
82.###.81.197:23
18#.##.78.145:23
17#.##4.111.180:23
14#.##.28.132:23
10#.##.246.253:23
11#.##4.218.37:23
1.##.174.197:23
12#.##1.39.177:23
14#.##4.240.188:23
23.##4.96.14:23
60.###.58.116:23
13#.##.168.239:23
12#.#6.1.39:23
15#.##.29.244:23
15#.##6.163.204:23
39.##.232.227:23
20#.##4.176.65:23
68.#.220.157:23
16#.##6.89.60:23
20#.##.132.250:23
14#.##0.136.154:23
17#.##8.32.164:23
10#.##8.153.189:23
12#.##2.163.118:23
18#.##.245.52:23
18#.##0.107.174:23
17#.##3.189.78:23
2.###.236.225:23
10#.##4.29.220:23
92.###.245.205:23
72.##.45.60:23
90.##.61.220:23
5.###.96.80:23
9.##.86.61:23
16#.#.206.160:23
48.##4.212.5:23
47.##.170.255:23
20#.##.206.195:23
44.###.151.215:23
21#.##.225.193:23
78.###.113.139:23
98.##.71.55:23
51.###.117.37:23
64.##.66.83:23
34.#.185.161:23
14#.##3.72.230:23
95.###.160.61:23
45.##4.88.97:23
31.##.122.135:23
17#.##.216.42:23
31.###.212.17:23
13#.##4.114.73:23
10#.#8.57.63:23
16#.##.220.224:23
19#.##6.178.208:23
25.##.251.66:23
39.###.164.216:23
19#.##1.19.31:23
18.##.210.239:23
22#.##2.40.66:23
80.##.74.175:23
17#.##0.96.154:23
16#.##.124.254:23
45.###.194.254:23
17#.##.167.38:23
45.###.139.22:23
14#.##.180.251:23
93.###.130.197:23
16#.##3.163.242:23
4.##.97.145:23
19#.##3.89.245:23
44.###.211.176:23
13#.##.148.115:23
15#.##8.161.20:23
89.###.197.49:23
20#.##6.248.174:23
17#.##.51.156:23
16#.##8.253.163:23
20#.##8.77.159:23
19.##1.63.67:23
13#.##7.109.138:23
21#.##.238.243:23
86.##.157.219:23
41.###.193.177:23
17#.##1.45.231:23
21#.##6.44.189:23
66.###.113.230:23
20#.##0.10.37:23
16#.##3.12.236:23
16#.##1.232.20:23
82.##.210.108:23
11#.##.48.118:23
19#.##6.10.163:23
82.###.94.196:23
20.###.179.156:23
13#.##.58.241:23
18#.##.212.13:23
15#.##1.170.215:23
20#.##5.147.132:23
93.##.144.8:23
58.###.169.172:23
35.###.227.113:23
69.###.59.255:23
68.###.69.245:23
21#.##.105.78:23
21#.##8.183.19:23
46.###.182.107:23
66.##.244.194:23
1.###.14.199:23
42.##.110.24:23
36.##.180.13:23
11#.##2.187.156:23
91.###.233.126:23
17#.##9.184.38:23
14#.#.180.9:23
22#.##.126.157:23
22#.##.227.249:23
1.##.92.238:23
79.###.238.106:23
14#.##9.106.24:23
54.###.171.154:23
14#.##.192.23:23
19#.##2.164.39:23
17#.##3.54.63:23
20#.##6.17.31:23
17.##.122.131:23
13#.##1.7.143:23
17#.##.244.75:23
18.##.99.250:23
14#.##0.200.54:23
21#.##.103.125:23
19#.##.199.145:23
17#.##4.163.54:23
40.#.193.169:23
99.##.53.65:23
77.##.175.191:23
17#.##4.107.109:23
12#.##7.184.130:23
52.##.120.220:23
17.###.38.224:23
14#.#.252.247:23
17#.#0.158.3:23
67.##.15.236:23
12#.##.162.156:23
8.###.165.161:23

Receives data from the following servers:

87.###.82.211:54358

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations