Technical Information
Malicious functions:
Launches itself as a daemon
Substitutes application name for:
- /bin/busybox
Kills system processes:
- sshd
Kills the following processes:
- <SAMPLE>
Network activity:
Establishes connection:
- 8.#.8.8:53
- 87.###.37.148:8873
Sends data to the following servers:
- 10#.##.10.14:60001
- 15#.###.65.239:60001
- 36.###.198.45:60001
- 22#.##.3.239:60001
- 81.##.120.118:60001
- 12.###.189.182:60001
- 20#.###.62.188:60001
- 27.##.93.120:60001
- 10#.##.225.174:60001
- 12#.##.30.174:60001
- 12#.###.186.154:60001
- 22#.###.247.32:60001
- 80.##.168.11:60001
- 32.###.116.7:60001
- 99.##.58.178:60001
- 53.##.101.212:60001
- 19#.##1.99.29:60001
- 14#.###.127.205:60001
- 42.###.227.56:60001
- 14.###.63.129:60001
- 10#.#.25.14:60001
- 18#.##.166.80:60001
- 53.###.91.217:60001
- 16#.##.252.68:60001
- 1.##.#54.58:60001
- 20#.##.119.69:60001
- 11#.##.74.234:60001
- 14.##.25.221:60001
- 46.###.220.189:60001
- 61.###.152.242:60001
- 16#.##.149.182:60001
- 45.##.76.79:60001
- 57.###.135.61:60001
- 21#.##.48.17:60001
- 12#.###.246.200:60001
- 59.###.76.230:60001
- 22#.###.228.22:60001
- 16#.###.184.71:60001
- 5.##.#3.72:60001
- 15#.###.196.61:60001
- 23.##.138.107:60001
- 19#.##.122.69:60001
- 12#.##0.33.31:60001
- 17#.##.249.180:60001
- 43.##.146.162:60001
- 17.###.215.152:60001
- 27.##.29.23:60001
- 22#.##0.60.75:60001
- 20#.###.25.235:60001
- 12#.##.46.141:60001
- 14#.#.255.76:60001
- 21#.##.47.13:60001
- 86.###.102.239:60001
- 21#.###.22.210:60001
- 35.##.149.218:60001
- 19#.##.96.30:60001
- 20#.###.79.174:60001
- 76.##.141.101:60001
- 18#.###.154.168:60001
- 20#.##1.47.78:60001
- 81.###.22.215:60001
- 21#.###.126.153:60001
- 67.#.#16.20:60001
- 21#.##.235.197:60001
- 13#.##6.94.98:60001
- 17#.###.141.196:60001
- 82.###.49.80:60001
- 21#.###.148.253:60001
- 65.###.67.242:60001
- 59.###.214.57:60001
- 20#.###.18.202:60001
- 18#.###.156.246:60001
- 80.##.163.155:60001
- 58.###.197.75:60001
- 15#.##.183.84:60001
- 10#.##.161.158:60001
- 14#.#.202.142:60001
- 19#.##.58.164:60001
- 24.###.3.79:60001
- 92.###.89.81:60001
- 12.###.51.206:60001
- 4.###.226.239:60001
- 88.###.245.109:60001
- 19#.###.188.74:60001
- 22#.##.213.153:60001
- 11#.###.214.195:60001
- 18#.###.30.250:60001
- 20#.##.225.206:60001
- 15#.##5.17.97:60001
- 16#.###.197.156:60001
- 10#.##.155.171:60001
- 20#.###.107.243:60001
- 90.##.197.142:60001
- 14#.###.155.227:60001
- 16#.##.105.7:60001
- 15#.#.227.40:60001
- 15#.###.196.21:60001
- 16#.###.82.117:60001
- 18#.###.153.163:60001
- 11#.###.170.46:60001
- 12#.##.17.59:60001
- 11#.###.25.193:60001
- 40.#.#44.65:60001
- 13.##.136.190:60001
- 20#.###.207.21:60001
- 22#.##.103.236:60001
- 27.###.88.51:60001
- 12#.###.144.12:60001
- 13#.###.200.78:60001
- 21#.##.230.65:60001
- 19#.###.36.222:60001
- 32.###.100.109:60001
- 16#.###.95.252:60001
- 12#.##1.79.10:60001
- 34.###.113.236:60001
- 21#.#.196.170:60001
- 81.###.232.227:60001
- 32.###.112.58:60001
- 17#.##.56.227:60001
- 27.#.#41.137:60001
- 11#.##.39.167:60001
- 20.###.186.181:60001
- 31.##.241.170:60001
- 41.###.12.1:60001
- 93.###.48.123:60001
- 88.###.28.74:60001
- 15#.###.65.138:60001
- 17#.###.225.193:60001
- 18#.###.70.219:60001
- 18.##.57.68:60001
- 60.###.57.27:60001
- 20#.##4.64.21:60001
- 67.###.123.254:60001
- 17#.###.39.240:60001
- 18#.###.122.102:60001
- 21#.###.115.187:60001
- 97.###.156.197:60001
- 37.###.36.57:60001
- 64.##.45.41:60001
- 96.###.223.205:60001
- 85.##.167.199:60001
- 11#.##.85.223:60001
- 12#.#.80.174:60001
- 69.###.161.142:60001
- 20#.##.120.56:60001
- 17#.###.127.82:60001
- 53.###.71.227:60001
- 19#.###.162.143:60001
- 20.###.66.205:60001
- 43.###.192.176:60001
- 17#.###.157.190:60001
- 14#.##.192.52:60001
- 22#.###.181.210:60001
- 63.###.139.149:60001
- 87.##.143.89:60001
- 34.#.#2.248:60001
- 18#.##.252.47:60001
- 19#.##1.73.54:60001
- 14#.##.119.120:60001
- 99.###.101.50:60001
- 73.###.176.59:60001
- 99.###.249.54:60001
- 90.#.#6.253:60001
- 80.###.11.115:60001
- 19#.###.90.250:60001
- 11#.###.32.157:60001
- 14#.###.46.159:60001
- 21#.##.241.221:60001
- 18#.###.240.126:60001
- 17#.###.112.243:60001
- 21#.###.175.164:60001
- 41.###.144.171:60001
- 97.###.59.92:60001
- 11#.##.209.2:60001
- 53.###.108.219:60001
- 19#.###.168.55:60001
- 17#.##9.194.2:60001
- 11#.##.163.150:60001
- 18#.##.232.204:60001
- 18#.##.52.154:60001
- 10#.##0.2.222:60001
- 46.###.204.226:60001
- 77.###.140.218:60001
- 10#.##.247.86:60001
- 21#.##.204.98:60001
- 19#.##.95.195:60001
- 20#.###.181.241:60001
- 18#.###.27.137:60001
- 21#.##.59.128:60001
- 12#.##.223.167:60001
- 81.#.#0.93:60001
- 20#.##.162.239:60001
- 58.##.168.170:60001
- 98.###.158.155:60001
- 19#.##4.50.10:60001
- 16#.##.151.114:60001
- 10#.#.170.112:60001
- 88.###.134.34:60001
- 4.###.99.214:60001
- 72.###.246.237:60001
- 18#.###.21.179:60001
- 17#.###.49.252:60001
- 34.##.123.227:60001
- 19#.###.255.245:60001
- 19#.###.107.183:60001
- 18#.##.68.111:60001
- 16#.###.229.19:60001
- 2.##.#27.84:60001
- 14#.##.186.197:60001
- 10#.##.215.247:60001
- 69.###.115.119:60001
- 22#.#.24.150:60001
- 79.##.234.192:60001
- 58.###.229.36:60001
- 16#.###.188.95:60001
- 45.###.200.84:60001
- 88.#.#3.122:60001
- 10#.##8.5.101:60001
- 57.###.181.159:60001
- 11#.#.245.186:60001
- 80.###.114.71:60001
- 13#.###.180.250:60001
- 44.###.97.72:60001
- 74.###.187.4:60001
- 21#.##6.5.73:60001
- 64.##.137.220:60001
- 74.###.77.8:60001
- 69.##.163.98:60001
- 15#.###.228.35:60001
- 10#.##4.58.14:60001
- 87.###.136.111:60001
- 94.###.88.233:60001
- 20#.###.76.134:60001
- 10#.###.38.177:60001
- 21#.##.251.113:60001
- 60.###.35.119:60001
- 15#.##.85.167:60001
- 95.###.93.76:60001
- 14#.###.245.186:60001
- 48.###.81.203:60001
- 79.###.28.103:60001
- 10#.###.191.210:60001
- 27.###.5.58:60001
- 85.###.88.133:60001
- 27.###.120.22:60001
- 19#.##7.68.54:60001
- 15#.###.122.11:60001
- 18#.##8.28.21:60001
- 96.##.203.218:60001
- 12#.##.24.133:60001
- 20#.##.9.71:60001
- 19#.###.49.111:60001
- 21#.##.67.116:60001
- 84.###.197.155:60001
- 13.##.175.118:60001
- 11#.##.133.29:60001
- 79.###.202.217:60001
- 66.###.107.190:60001
- 15#.##.44.177:60001
- 34.###.125.188:60001
- 37.###.46.18:60001
- 40.###.159.186:60001
- 57.###.106.117:60001
- 59.###.224.95:60001
- 39.###.174.55:60001
- 19#.##9.5.233:60001
- 11#.##.12.249:60001
- 18#.###.114.118:60001
- 16#.##.80.14:60001
- 60.###.94.85:60001
- 21#.#.178.139:60001
- 17#.##8.73.68:60001
- 15#.###.134.115:60001
- 19#.###.26.100:60001
- 14#.###.82.112:60001
- 17#.###.135.191:60001
- 79.##.50.104:60001
- 16#.##.102.48:60001
- 1.###.244.48:60001
- 12#.##.26.157:60001
- 16#.##.77.70:60001
- 20.###.18.37:60001
- 21#.###.196.187:60001
- 72.##.253.66:60001
- 10#.###.240.12:60001
- 18#.##.62.103:60001
- 16#.##.174.41:60001
- 10#.###.188.123:60001
- 72.###.112.173:60001
- 86.###.140.136:60001
- 17.##.206.210:60001
- 71.###.8.249:60001
- 35.###.94.209:60001
- 78.###.52.118:60001
- 98.###.252.15:60001
- 96.###.78.5:60001
- 10#.##.88.88:60001
- 81.###.90.225:60001
- 12#.###.16.246:60001
- 11#.###.148.158:60001
- 21#.##.217.254:60001
- 19#.#.222.174:60001
- 63.##.188.10:60001
- 90.##.115.185:60001
- 91.###.49.0:60001
- 10#.###.255.197:60001
- 18#.###.128.184:60001
- 18.###.0.123:60001
- 16#.##.172.5:60001
- 38.###.165.217:60001
- 42.#.#7.156:60001
- 62.###.195.248:60001
- 46.###.250.153:60001
- 67.##.146.39:60001
- 14#.###.134.189:60001
- 16#.##0.29.22:60001
- 16#.###.161.116:60001
- 20#.##5.79.36:60001
- 19#.###.112.115:60001
- 27.###.202.64:60001
- 21#.##.53.10:60001
- 21#.##.187.135:60001
- 53.###.203.184:60001
- 77.###.236.67:60001
- 17#.##.68.120:60001
- 20#.###.17.250:60001
- 78.###.46.38:60001
- 18#.##6.96.9:60001
