Linux.Siggen.1786

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

Network activity:

Awaits incoming connections on ports:

127.0.0.1:11133

Establishes connection:

68.###.77.164:1166
8.#.8.8:53

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

Sends data to the following servers:

2.##.#4.200:2323
11#.##8.81.16:2323
13#.#.229.235:2323
37.###.194.206:2323
12#.##3.69.4:2323
68.##.234.229:2323
10#.##5.148.2:2323
68.###.77.164:1166
51.###.90.154:2323
19#.##.206.117:2323
65.###.97.59:2323
80.###.58.81:2323
12#.##.161.254:2323
51.###.162.174:2323
27.###.191.61:2323
19#.##.140.119:2323
16#.##0.125.11:2323
99.###.25.154:2323
15#.##0.239.79:2323
14#.##.60.115:2323
22#.##9.42.214:2323
14.###.188.244:2323
21#.##.3.84:2323
10#.##8.72.124:2323
12#.##.4.140:2323
11#.###.172.106:2323
12#.###.238.240:2323
63.###.252.156:2323
31.###.226.178:2323
11#.##7.65.58:2323
93.###.88.139:2323
16#.##.138.55:2323
19#.###.202.166:2323
80.###.204.152:2323
13#.###.151.219:2323
71.###.174.135:2323
21#.##.69.151:2323
82.###.151.123:2323
14#.##.211.121:2323
22#.##4.153.35:2323
16#.###.104.162:2323
64.###.64.93:2323
10#.###.201.184:2323
1.###.198.25:2323
12#.###.250.106:2323
14#.###.189.213:2323
13#.###.237.223:2323
44.##.235.173:2323
12.###.43.40:2323
19#.##2.254.82:2323
15#.##7.152.61:2323
79.##.142.19:2323
10#.##.183.17:2323
10#.##.104.145:2323
77.###.83.242:2323
16#.##.219.209:2323
18#.##1.120.59:2323
2.##.22.85:2323
27.###.172.241:2323
11#.###.101.104:2323
12#.##0.209.92:2323
20#.##.94.85:2323
17#.##3.51.69:2323
21#.##.214.180:2323
99.###.79.213:2323
17.###.124.93:2323
16#.##5.53.207:2323
22#.##6.33.201:2323
19#.##.41.224:2323
12#.###.124.203:2323
19#.##3.2.89:2323
91.###.90.210:2323
76.##.80.33:2323
21#.##.28.210:2323
20#.###.147.121:2323
54.##.67.194:2323
16#.#.25.110:2323
20#.##.202.112:2323
88.###.5.94:2323
16#.##.77.4:2323
18#.##.168.227:2323
19#.###.122.243:2323
18.###.80.170:2323
13#.##.73.37:2323
16#.##9.94.229:2323
18#.##.202.1:2323
9.###.100.128:2323
15#.##8.217.17:2323
21#.##0.16.236:2323
17#.##6.128.26:2323
17#.##.109.92:2323
21#.##0.15.163:2323
13#.##.238.187:2323
15#.##.62.102:2323
11#.##0.39.210:2323
15#.##.223.213:2323
15#.##.232.18:2323
8.##.#5.230:2323
11#.##.17.192:2323
23.###.89.4:2323
68.###.176.221:2323
11#.##8.27.1:2323
14#.##9.48.117:2323
13#.###.219.244:2323
13#.##.188.187:2323
20#.##.90.42:2323
19#.##.96.166:2323
16#.##.198.144:2323
14#.###.248.218:2323
20#.##9.171.98:2323
89.###.129.206:2323
13#.##6.114.42:2323
14.##.53.163:2323
12#.#.39.8:2323
16#.##.245.13:2323
86.##.246.136:2323
21#.##.16.136:2323
81.##.210.229:2323
21#.##9.64.62:2323
4.##.15.99:2323
16#.###.227.173:2323
50.###.22.60:2323
14#.##.28.227:2323
10#.##.180.158:2323
66.###.213.130:2323
11#.##3.131.18:2323
17#.##.235.75:2323
13#.##.148.162:2323
76.##.69.249:2323
45.###.45.32:2323
14#.#.80.3:2323
16#.##.215.37:2323
13#.##1.144.24:2323
12#.###.109.203:2323
20#.###.114.249:2323
20#.##.120.127:2323
73.##.152.115:2323
12#.##.129.96:2323
19#.##0.101.0:2323
13#.##4.16.74:2323
61.###.125.29:2323
11#.##9.21.191:2323
9.###.188.132:2323
16#.##.58.58:2323
16#.##5.164.55:2323
14#.##.166.99:2323
85.##.88.21:2323
17#.##2.99.82:2323
22#.##.112.162:2323
17.###.216.76:2323
60.##.155.83:2323
17.###.140.98:2323
80.###.164.172:2323
14#.##.34.3:2323
22#.##0.24.83:2323
11#.##7.11.118:2323
11#.##1.208.10:2323
81.#.#5.204:2323
14.##.6.225:2323
11#.###.234.104:2323
13.###.100.194:2323
13#.##2.95.179:2323
15#.##.53.250:2323
21#.##3.55.238:2323
16#.##.96.223:2323
14#.##7.205.13:2323
21#.###.201.189:2323
67.##.189.10:2323
18#.###.127.148:2323
16#.##.218.5:2323
22#.##7.51.189:2323
46.###.57.128:2323
16#.##7.177.19:2323
12.###.241.133:2323
32.###.46.144:2323
18#.###.138.117:2323
19#.###.235.118:2323
16#.##5.178.61:2323
66.##.56.148:2323
51.##.130.34:2323
13#.###.163.176:2323
11#.##3.34.27:2323
16#.#.216.246:2323
32.##.175.2:2323
1.###.159.214:2323
22#.###.165.172:2323
22#.###.193.221:2323
17#.##.162.254:2323
88.###.244.160:2323
87.##.34.103:2323
59.##.53.94:2323
21#.###.187.169:2323
10#.##.28.228:2323
16#.##.116.89:2323
18#.##.62.246:2323
18#.##.175.63:2323
20#.##1.114.24:2323
11#.##.149.48:2323
80.###.24.41:2323
4.#.##8.245:2323
12#.##5.3.36:2323
20#.##.197.99:2323
14#.##6.57.87:2323
15#.##.209.58:2323
17#.##.250.158:2323
11#.##.99.206:2323
20#.##1.74.232:2323
24.###.247.213:2323
19#.###.213.142:2323
68.###.75.215:2323
97.##.52.83:2323
11#.##.97.154:2323
66.###.227.0:2323
46.###.44.46:2323
70.###.214.156:2323
17.##.65.139:2323
75.###.12.13:2323
44.###.74.42:2323
16#.##.230.182:2323
91.###.53.36:2323
14#.##8.165.42:2323
10#.##.169.126:2323
15#.#.179.246:2323
16#.###.233.101:2323
10#.##9.1.165:2323
10#.##5.56.103:2323
24.##.38.206:2323
38.##.22.245:2323
13#.##.245.129:2323
58.##.157.75:2323
11#.##1.132.87:2323
13#.##.186.159:2323
36.##.36.59:2323
95.###.80.194:2323
99.###.130.84:2323
17#.###.255.114:2323
45.###.61.139:2323
46.###.180.199:2323
79.###.7.116:2323
51.###.238.216:2323
83.##.78.157:2323
13#.##.213.166:2323
52.###.243.206:2323
12.###.99.50:2323
35.###.143.168:2323
10#.##1.80.171:2323
15#.##.238.241:2323
60.##.9.177:2323
17#.###.125.136:2323
13#.##.71.242:2323
34.###.146.53:2323
46.###.99.218:2323
17#.##.156.9:2323
17#.###.221.194:2323
17.###.81.104:2323
13#.##7.124.72:2323
74.###.61.154:2323
17#.##.34.204:2323
14#.##6.10.209:2323
11#.##.107.116:2323
98.###.22.86:2323
75.###.40.170:2323
67.###.227.102:2323
79.###.156.244:2323
8.###.113.78:2323
13#.##4.61.171:2323
16#.##.82.167:2323
52.###.68.229:2323
15#.##2.154.37:2323
18#.##7.87.189:2323
34.##.33.194:2323
22#.###.210.119:2323
11#.##8.180.11:2323
12#.##.138.219:2323
20#.###.189.138:2323
74.###.112.204:2323
17#.##5.149.70:2323
17#.##.232.234:2323
92.###.131.165:2323
84.###.71.170:2323
1.###.196.86:2323
67.###.52.111:2323
19#.##.218.63:2323
16#.###.187.179:2323
17#.##5.61.175:2323
98.###.175.25:2323
17#.#.236.44:2323
22#.##3.47.244:2323
19.###.162.250:2323
37.##.128.190:2323
17#.##0.121.85:23
16#.##5.153.116:23
11#.##.192.215:23
11#.##.48.219:23
13#.##6.2.224:23
64.###.229.162:23
16#.##.204.149:23
72.###.130.139:23
27.##.57.232:23
88.##.241.108:2323
57.###.188.104:23
5.###.34.92:23
18#.##.157.189:23
83.##.225.48:23
67.###.85.236:23
10#.##9.155.18:23
21#.##9.176.163:23
32.###.75.100:23
16#.##5.220.65:23
19#.##.156.123:2323
14#.##.173.138:23
18#.##5.19.34:23
71.###.240.26:23
21#.##6.92.226:23
17#.##4.51.189:23
22#.##6.13.204:23
17#.##1.70.196:23
80.##9.89.44:23
13#.##3.32.237:23
13#.###.142.140:2323
21#.##.144.75:23
92.###.154.94:23
15#.##.17.123:23
14#.##.19.200:23
62.##9.87.85:23
76.##.110.190:23
63.##.140.182:23
18#.##8.170.197:23
18#.##.97.249:23
21#.###.150.144:2323
21#.##.173.56:23
16#.##9.134.211:23
11#.##.246.95:23
10#.##5.34.204:23
9.##.212.150:23
18#.##2.72.157:23
17#.#4.50.43:23
16#.##9.202.98:23
10#.##6.243.198:23
20#.##.179.2:2323
13#.##9.14.85:23
61.###.14.122:23
12#.##2.251.143:23
14#.##.250.13:23
17#.##4.109.135:23
14#.#.125.170:23
10#.##.92.122:23
93.##.179.160:23
5.#.#11.48:23
10#.###.163.237:2323
60.##5.85.15:23
13#.##7.189.247:23
10#.##7.150.133:23
19#.##0.84.150:23
15#.##0.188.105:23
36.###.134.87:23
16#.##0.253.184:23
77.##3.98.55:23
80.##4.10.27:23
13#.##.203.215:2323
14#.##6.231.223:23
20#.##9.61.181:23
15#.#.231.253:23
64.##.234.183:23
12#.#.157.199:23
18#.#0.61.27:23
17#.##2.127.39:23
14.##.5.195:23
92.###.64.246:23
18#.#.168.110:2323
79.###.253.166:23
20#.##.177.40:23
14#.##4.55.27:23
20#.##8.108.238:23
11#.##.67.154:23
20#.##.43.212:23

Receives data from the following servers:

68.###.77.164:1166

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations