Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Linux.Siggen.2019

Added to the Dr.Web virus database: 2019-07-23

Virus description added:

Technical Information

Malicious functions:
Launches itself as a daemon
Substitutes application name for:
  • /bin/busybox
Kills system processes:
  • sshd
Kills the following processes:
  • <SAMPLE>
Network activity:
Establishes connection:
  • 8.#.8.8:53
  • 87.###.37.148:8873
Sends data to the following servers:
  • 10#.##.10.14:60001
  • 15#.###.65.239:60001
  • 36.###.198.45:60001
  • 22#.##.3.239:60001
  • 81.##.120.118:60001
  • 12.###.189.182:60001
  • 20#.###.62.188:60001
  • 27.##.93.120:60001
  • 10#.##.225.174:60001
  • 12#.##.30.174:60001
  • 12#.###.186.154:60001
  • 22#.###.247.32:60001
  • 80.##.168.11:60001
  • 32.###.116.7:60001
  • 99.##.58.178:60001
  • 53.##.101.212:60001
  • 19#.##1.99.29:60001
  • 14#.###.127.205:60001
  • 42.###.227.56:60001
  • 14.###.63.129:60001
  • 10#.#.25.14:60001
  • 18#.##.166.80:60001
  • 53.###.91.217:60001
  • 16#.##.252.68:60001
  • 1.##.#54.58:60001
  • 20#.##.119.69:60001
  • 11#.##.74.234:60001
  • 14.##.25.221:60001
  • 46.###.220.189:60001
  • 61.###.152.242:60001
  • 16#.##.149.182:60001
  • 45.##.76.79:60001
  • 57.###.135.61:60001
  • 21#.##.48.17:60001
  • 12#.###.246.200:60001
  • 59.###.76.230:60001
  • 22#.###.228.22:60001
  • 16#.###.184.71:60001
  • 5.##.#3.72:60001
  • 15#.###.196.61:60001
  • 23.##.138.107:60001
  • 19#.##.122.69:60001
  • 12#.##0.33.31:60001
  • 17#.##.249.180:60001
  • 43.##.146.162:60001
  • 17.###.215.152:60001
  • 27.##.29.23:60001
  • 22#.##0.60.75:60001
  • 20#.###.25.235:60001
  • 12#.##.46.141:60001
  • 14#.#.255.76:60001
  • 21#.##.47.13:60001
  • 86.###.102.239:60001
  • 21#.###.22.210:60001
  • 35.##.149.218:60001
  • 19#.##.96.30:60001
  • 20#.###.79.174:60001
  • 76.##.141.101:60001
  • 18#.###.154.168:60001
  • 20#.##1.47.78:60001
  • 81.###.22.215:60001
  • 21#.###.126.153:60001
  • 67.#.#16.20:60001
  • 21#.##.235.197:60001
  • 13#.##6.94.98:60001
  • 17#.###.141.196:60001
  • 82.###.49.80:60001
  • 21#.###.148.253:60001
  • 65.###.67.242:60001
  • 59.###.214.57:60001
  • 20#.###.18.202:60001
  • 18#.###.156.246:60001
  • 80.##.163.155:60001
  • 58.###.197.75:60001
  • 15#.##.183.84:60001
  • 10#.##.161.158:60001
  • 14#.#.202.142:60001
  • 19#.##.58.164:60001
  • 24.###.3.79:60001
  • 92.###.89.81:60001
  • 12.###.51.206:60001
  • 4.###.226.239:60001
  • 88.###.245.109:60001
  • 19#.###.188.74:60001
  • 22#.##.213.153:60001
  • 11#.###.214.195:60001
  • 18#.###.30.250:60001
  • 20#.##.225.206:60001
  • 15#.##5.17.97:60001
  • 16#.###.197.156:60001
  • 10#.##.155.171:60001
  • 20#.###.107.243:60001
  • 90.##.197.142:60001
  • 14#.###.155.227:60001
  • 16#.##.105.7:60001
  • 15#.#.227.40:60001
  • 15#.###.196.21:60001
  • 16#.###.82.117:60001
  • 18#.###.153.163:60001
  • 11#.###.170.46:60001
  • 12#.##.17.59:60001
  • 11#.###.25.193:60001
  • 40.#.#44.65:60001
  • 13.##.136.190:60001
  • 20#.###.207.21:60001
  • 22#.##.103.236:60001
  • 27.###.88.51:60001
  • 12#.###.144.12:60001
  • 13#.###.200.78:60001
  • 21#.##.230.65:60001
  • 19#.###.36.222:60001
  • 32.###.100.109:60001
  • 16#.###.95.252:60001
  • 12#.##1.79.10:60001
  • 34.###.113.236:60001
  • 21#.#.196.170:60001
  • 81.###.232.227:60001
  • 32.###.112.58:60001
  • 17#.##.56.227:60001
  • 27.#.#41.137:60001
  • 11#.##.39.167:60001
  • 20.###.186.181:60001
  • 31.##.241.170:60001
  • 41.###.12.1:60001
  • 93.###.48.123:60001
  • 88.###.28.74:60001
  • 15#.###.65.138:60001
  • 17#.###.225.193:60001
  • 18#.###.70.219:60001
  • 18.##.57.68:60001
  • 60.###.57.27:60001
  • 20#.##4.64.21:60001
  • 67.###.123.254:60001
  • 17#.###.39.240:60001
  • 18#.###.122.102:60001
  • 21#.###.115.187:60001
  • 97.###.156.197:60001
  • 37.###.36.57:60001
  • 64.##.45.41:60001
  • 96.###.223.205:60001
  • 85.##.167.199:60001
  • 11#.##.85.223:60001
  • 12#.#.80.174:60001
  • 69.###.161.142:60001
  • 20#.##.120.56:60001
  • 17#.###.127.82:60001
  • 53.###.71.227:60001
  • 19#.###.162.143:60001
  • 20.###.66.205:60001
  • 43.###.192.176:60001
  • 17#.###.157.190:60001
  • 14#.##.192.52:60001
  • 22#.###.181.210:60001
  • 63.###.139.149:60001
  • 87.##.143.89:60001
  • 34.#.#2.248:60001
  • 18#.##.252.47:60001
  • 19#.##1.73.54:60001
  • 14#.##.119.120:60001
  • 99.###.101.50:60001
  • 73.###.176.59:60001
  • 99.###.249.54:60001
  • 90.#.#6.253:60001
  • 80.###.11.115:60001
  • 19#.###.90.250:60001
  • 11#.###.32.157:60001
  • 14#.###.46.159:60001
  • 21#.##.241.221:60001
  • 18#.###.240.126:60001
  • 17#.###.112.243:60001
  • 21#.###.175.164:60001
  • 41.###.144.171:60001
  • 97.###.59.92:60001
  • 11#.##.209.2:60001
  • 53.###.108.219:60001
  • 19#.###.168.55:60001
  • 17#.##9.194.2:60001
  • 11#.##.163.150:60001
  • 18#.##.232.204:60001
  • 18#.##.52.154:60001
  • 10#.##0.2.222:60001
  • 46.###.204.226:60001
  • 77.###.140.218:60001
  • 10#.##.247.86:60001
  • 21#.##.204.98:60001
  • 19#.##.95.195:60001
  • 20#.###.181.241:60001
  • 18#.###.27.137:60001
  • 21#.##.59.128:60001
  • 12#.##.223.167:60001
  • 81.#.#0.93:60001
  • 20#.##.162.239:60001
  • 58.##.168.170:60001
  • 98.###.158.155:60001
  • 19#.##4.50.10:60001
  • 16#.##.151.114:60001
  • 10#.#.170.112:60001
  • 88.###.134.34:60001
  • 4.###.99.214:60001
  • 72.###.246.237:60001
  • 18#.###.21.179:60001
  • 17#.###.49.252:60001
  • 34.##.123.227:60001
  • 19#.###.255.245:60001
  • 19#.###.107.183:60001
  • 18#.##.68.111:60001
  • 16#.###.229.19:60001
  • 2.##.#27.84:60001
  • 14#.##.186.197:60001
  • 10#.##.215.247:60001
  • 69.###.115.119:60001
  • 22#.#.24.150:60001
  • 79.##.234.192:60001
  • 58.###.229.36:60001
  • 16#.###.188.95:60001
  • 45.###.200.84:60001
  • 88.#.#3.122:60001
  • 10#.##8.5.101:60001
  • 57.###.181.159:60001
  • 11#.#.245.186:60001
  • 80.###.114.71:60001
  • 13#.###.180.250:60001
  • 44.###.97.72:60001
  • 74.###.187.4:60001
  • 21#.##6.5.73:60001
  • 64.##.137.220:60001
  • 74.###.77.8:60001
  • 69.##.163.98:60001
  • 15#.###.228.35:60001
  • 10#.##4.58.14:60001
  • 87.###.136.111:60001
  • 94.###.88.233:60001
  • 20#.###.76.134:60001
  • 10#.###.38.177:60001
  • 21#.##.251.113:60001
  • 60.###.35.119:60001
  • 15#.##.85.167:60001
  • 95.###.93.76:60001
  • 14#.###.245.186:60001
  • 48.###.81.203:60001
  • 79.###.28.103:60001
  • 10#.###.191.210:60001
  • 27.###.5.58:60001
  • 85.###.88.133:60001
  • 27.###.120.22:60001
  • 19#.##7.68.54:60001
  • 15#.###.122.11:60001
  • 18#.##8.28.21:60001
  • 96.##.203.218:60001
  • 12#.##.24.133:60001
  • 20#.##.9.71:60001
  • 19#.###.49.111:60001
  • 21#.##.67.116:60001
  • 84.###.197.155:60001
  • 13.##.175.118:60001
  • 11#.##.133.29:60001
  • 79.###.202.217:60001
  • 66.###.107.190:60001
  • 15#.##.44.177:60001
  • 34.###.125.188:60001
  • 37.###.46.18:60001
  • 40.###.159.186:60001
  • 57.###.106.117:60001
  • 59.###.224.95:60001
  • 39.###.174.55:60001
  • 19#.##9.5.233:60001
  • 11#.##.12.249:60001
  • 18#.###.114.118:60001
  • 16#.##.80.14:60001
  • 60.###.94.85:60001
  • 21#.#.178.139:60001
  • 17#.##8.73.68:60001
  • 15#.###.134.115:60001
  • 19#.###.26.100:60001
  • 14#.###.82.112:60001
  • 17#.###.135.191:60001
  • 79.##.50.104:60001
  • 16#.##.102.48:60001
  • 1.###.244.48:60001
  • 12#.##.26.157:60001
  • 16#.##.77.70:60001
  • 20.###.18.37:60001
  • 21#.###.196.187:60001
  • 72.##.253.66:60001
  • 10#.###.240.12:60001
  • 18#.##.62.103:60001
  • 16#.##.174.41:60001
  • 10#.###.188.123:60001
  • 72.###.112.173:60001
  • 86.###.140.136:60001
  • 17.##.206.210:60001
  • 71.###.8.249:60001
  • 35.###.94.209:60001
  • 78.###.52.118:60001
  • 98.###.252.15:60001
  • 96.###.78.5:60001
  • 10#.##.88.88:60001
  • 81.###.90.225:60001
  • 12#.###.16.246:60001
  • 11#.###.148.158:60001
  • 21#.##.217.254:60001
  • 19#.#.222.174:60001
  • 63.##.188.10:60001
  • 90.##.115.185:60001
  • 91.###.49.0:60001
  • 10#.###.255.197:60001
  • 18#.###.128.184:60001
  • 18.###.0.123:60001
  • 16#.##.172.5:60001
  • 38.###.165.217:60001
  • 42.#.#7.156:60001
  • 62.###.195.248:60001
  • 46.###.250.153:60001
  • 67.##.146.39:60001
  • 14#.###.134.189:60001
  • 16#.##0.29.22:60001
  • 16#.###.161.116:60001
  • 20#.##5.79.36:60001
  • 19#.###.112.115:60001
  • 27.###.202.64:60001
  • 21#.##.53.10:60001
  • 21#.##.187.135:60001
  • 53.###.203.184:60001
  • 77.###.236.67:60001
  • 17#.##.68.120:60001
  • 20#.###.17.250:60001
  • 78.###.46.38:60001
  • 18#.##6.96.9:60001

Curing recommendations


Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

One month (no registration) or three months (registration and renewal discount)

Download Dr.Web

Download by serial number