Linux.Siggen.2317

Technical Information

Malicious functions:

Launches itself as a daemon

Kills system processes:

sshd

Kills the following processes:

cron
atd
systemd-logind
rsyslogd
dbus-daemon
agetty
exim4
bash
run.sh
kworker/u2:1
systemd
systemd-cgroups

Network activity:

Establishes connection:

80.###.134.53:1001
8.#.8.8:53
80.###.134.53:379

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

Sends data to the following servers:

15#.##2.42.27:23
14#.##.34.167:23
37.##7.37.6:23
15#.##7.199.97:23
69.###.39.106:23
21#.##.254.239:23
88.##.50.99:23
72.##.239.231:23
67.###.64.234:23
41.#.211.248:23
85.##.116.3:23
14#.##2.10.193:23
10#.##5.8.215:23
42.###.61.226:23
91.##.113.122:23
68.###.229.49:23
10#.##.122.220:23
18#.##2.101.179:23
13#.##9.137.155:23
12.##.96.74:23
11#.##5.160.33:23
21#.##5.185.87:23
19#.##9.58.18:23
13#.##6.101.214:23
11#.##5.160.159:23
79.#.128.2:23
66.##.58.135:23
15#.#.133.130:23
11#.##.119.83:23
92.##.177.172:23
17#.##.210.49:23
20#.##6.89.238:23
18#.##.117.13:23
5.###.188.199:23
18#.#.158.68:23
16#.##3.12.147:23
18#.#.15.198:23
21#.##.157.194:23
46.###.110.72:23
89.###.197.19:23
73.##0.13.10:23
14#.##1.51.39:23
17#.#6.5.75:23
11#.##7.96.246:23
12#.##.102.23:23
20#.##9.148.122:23
13#.##.53.207:23
17#.##.74.191:23
80.###.84.103:23
73.##.3.143:23
18#.##7.210.182:23
19#.##8.43.202:23
18#.##5.59.16:23
13.##4.6.215:23
69.##6.227.8:23
20#.#1.56.66:23
37.#.186.194:23
38.##.75.145:23
10#.##5.117.153:23
57.#.136.223:23
16#.##.96.114:23
9.##.43.203:23
14#.##.92.236:23
15#.##5.61.192:23
90.##4.31.69:23
16#.##5.74.193:23
11#.##.147.57:23
21#.##8.14.57:23
87.###.134.95:23
17#.##.247.28:23
71.###.230.92:23
96.##.35.215:23
31.##.26.117:23
18#.##8.213.50:23
10#.#.51.66:23
10#.##6.172.148:23
54.##.173.38:23
58.###.219.47:23
20#.#6.176.8:23
9.##.243.178:23
89.###.155.33:23
13#.##.241.253:23
21#.##2.156.154:23
18#.##3.173.63:23
80.###.163.107:23
25.###.195.98:23
13#.##8.134.99:23
16#.##0.49.35:23
78.###.166.60:23
95.##.246.54:23
11#.##.233.245:23
1.##.123.134:23
84.###.241.186:23
18#.#.235.52:23
16#.##.238.182:23
53.##9.79.64:23
21#.##1.155.200:23
97.###.123.54:23
90.###.202.203:23
20#.#0.5.249:23
82.##7.42.44:23
17#.##6.194.178:23
13#.##5.6.242:23
41.##.210.90:23
10#.##8.108.107:23
19#.##.198.199:23
11#.##1.184.237:23
20#.##.249.178:23
20#.#.217.41:23
74.###.104.215:23
13#.#.130.55:23
14#.##3.142.47:23
19#.#.64.226:23
86.##.53.165:23
36.##.15.209:23
20#.##6.219.143:23
72.##.224.17:23
11#.#3.20.70:23
47.##.205.148:23
18#.##6.230.152:23
18#.##7.179.176:23
15#.#7.8.232:23
19#.##0.191.251:23
84.#.2.47:23
12#.##0.17.37:23
62.##.197.243:23
11#.##.155.60:23
13#.##7.172.63:23
86.###.196.104:23
45.###.141.125:23
66.##.228.103:23
15#.##.111.89:23
19#.##6.52.181:23
9.###.126.207:23
16#.##4.138.164:23
87.###.178.223:23
36.##.87.138:23
19#.##8.72.129:23
18#.##.56.140:23
20#.##.212.19:23
10#.##7.190.15:23
68.###.145.111:23
99.##2.60.8:23
18#.##.111.152:23
14#.##.253.18:23
50.##.7.125:23
82.###.109.132:23
19#.##4.79.224:23
17#.##0.11.84:23
12.#.238.142:23
10#.##4.192.90:23
18#.##.150.89:23
16#.##2.126.132:23
72.##.111.16:23
4.###.175.149:23
17#.##.58.188:23
10#.##4.238.80:23
22#.##.148.240:23
21#.#.156.45:23
95.###.222.222:23
11#.##4.207.163:23
14#.##9.245.144:23
46.##.168.198:23
18#.##5.192.210:23
93.#.77.191:23
20#.#.51.62:23
19#.##5.198.6:23
14#.##5.71.103:23
13#.##1.240.90:23
20#.##2.138.94:23
18#.#8.52.57:23
11#.##2.48.120:23
43.###.222.59:23
4.###.251.138:23
18.###.63.162:23
19#.##9.38.116:23
16#.#7.3.131:23
19#.##2.221.54:23
12#.##7.105.41:23
38.###.237.68:23
14.##0.9.146:23
67.##.9.196:23
12#.##3.29.96:23
22#.##2.3.152:23
12#.##.61.212:23
14#.##3.58.185:23
20#.##.128.150:23
15#.##2.81.137:23
11#.##.101.49:23
17#.##7.79.230:23
16#.##0.54.168:23
12.###.143.104:23
16#.##3.74.53:23
17#.#8.5.195:23
68.###.91.179:23
41.###.103.74:23
76.###.216.34:23
15#.##6.52.184:23
57.##.130.2:23
21#.##4.149.171:23
48.##.17.119:23
16#.##.245.192:23
16#.##0.76.207:23
11#.##9.124.118:23
16#.##6.52.189:23
15#.##9.28.22:23
12#.##.202.63:23
21#.##4.123.159:23
17#.##6.216.126:23
15#.##1.100.128:23
18#.##9.199.167:23
14#.##2.32.18:23
73.##.167.134:23
12#.##.202.10:23
17#.##.181.106:23
10#.##4.79.94:23
21#.##0.152.31:23
20#.##4.141.47:23
65.###.251.241:23
21#.##.144.27:23
59.###.100.117:23
18#.##.213.75:23
41.###.65.158:23
11#.##8.244.142:23
18#.##.197.136:23
19#.##3.60.169:23
8.###.46.14:23
10#.##3.17.170:23
15#.##.115.65:23
21#.#.74.0:23
15#.##8.41.238:23
64.##.2.208:23
19#.##9.246.254:23
58.##.80.26:23
20#.#.50.144:23
49.#.156.191:23
65.##.69.255:23
13#.##7.97.216:23
15#.##.64.128:23
14#.##0.160.151:23
64.#.39.211:23
16#.##0.238.64:23
14.##.104.176:23
12#.##.195.26:23
13#.##.241.38:23
62.###.53.118:23
19#.#1.3.117:23
18#.##4.181.7:23
17#.##1.205.179:23
98.##6.43.62:23
84.###.183.206:23
13#.##3.238.101:23
25.##8.74.52:23
11#.##6.169.80:23
59.###.235.188:23
14#.##.196.53:23
40.###.146.162:23
34.##.8.242:23
73.##.187.178:23
12#.##7.191.23:23
13#.#.228.127:23
12#.##.49.117:23
5.###.90.177:23
13#.##2.133.44:23
12#.##1.163.233:23
17.###.107.173:23
10#.##.151.131:23
15#.#0.26.4:23
19.##.247.8:23
75.##.162.106:23
10#.##2.129.55:23
53.##.2.49:23
18#.##0.60.50:23
13#.##3.219.251:23
45.##.131.66:23
59.###.177.122:23
19#.##6.66.210:23
13#.##4.153.186:23
11#.##1.70.211:23
71.##.63.18:23
44.###.53.145:23
35.##4.97.94:23
17#.##7.165.120:23
19#.##0.156.42:23
11#.##.172.168:23
18#.##3.145.106:23
81.##.67.9:23
19#.##3.215.178:23
19#.##1.211.54:23
16#.##9.168.78:23
8.###.252.215:23
50.###.199.165:23
21#.##5.91.62:23
16#.##.62.112:23
76.##.91.240:23
19#.#6.2.41:23
34.###.206.145:23
16#.##2.158.218:23
65.##7.68.97:23
10#.##0.100.23:23
15#.##3.132.163:23
48.##.131.114:23
75.##.69.201:23
14#.##6.117.208:23
14.##.26.48:23
13#.#7.102.9:23
40.###.224.92:23
14#.##.80.220:23
13#.##9.57.128:23
18#.##.14.207:23
10#.##9.233.133:23
17#.##.128.150:23
19#.##1.148.19:23
37.##.7.196:23
21#.##3.129.234:23
95.###.225.98:23
37.###.212.60:23
43.##0.9.97:23
39.##.101.104:23
10#.##.219.219:23
20#.##.19.225:23
23.##.91.254:23
20#.##8.175.202:23
24.##6.45.45:23
99.###.75.251:23
22#.##4.217.20:23
11#.##2.65.177:23
19#.##8.68.204:23
53.##.87.46:23
18#.##9.30.144:23
92.##1.41.66:23
18#.##.163.105:23
19#.#31.0.73:23
12#.##.41.143:23
74.###.56.100:23
94.###.254.59:23
13#.##.175.206:23
87.##.247.185:23
54.##.52.102:23
13#.##6.239.117:23
87.###.183.208:23
70.###.125.98:23
2.##.99.81:23
20#.##8.160.195:23
34.###.146.253:23
67.###.106.65:23
46.###.123.87:23
73.##0.34.25:23
14#.##1.127.154:23
12#.##4.209.17:23
72.###.151.38:23
18.##.163.171:23
61.##.107.201:23
5.###.225.167:23
21#.##2.176.145:23
15#.##6.232.254:23
13#.##.175.68:23
13#.#9.18.34:23
15#.##9.198.145:23
87.###.29.228:23
10#.#1.1.109:23
58.###.46.150:23
17#.##.241.129:23
20#.##.182.198:23
11#.##5.155.22:23
12#.##.118.166:23
64.###.29.234:23
23.###.216.203:23
13#.##4.35.162:23
14#.##2.182.195:23
10#.##8.61.242:23
14#.#6.1.17:23
16#.##1.198.114:23
15#.##5.155.216:23
18#.##2.132.29:23
10#.##4.64.126:23
21#.##7.97.193:23
21#.#2.64.19:23
93.###.166.221:23
13#.##7.234.100:23
20#.##.199.118:23
15#.##.20.184:23
12#.##1.249.212:23
14#.##9.138.255:23
17#.##0.111.3:23
16#.##3.137.74:23
61.##7.18.62:23
14#.##7.226.121:23
11#.##6.119.42:23
14#.##.231.46:23
10#.##4.97.139:23
99.##.175.102:23
22#.##6.210.19:23
35.###.99.187:23
88.###.238.69:23
15#.##9.25.31:23
12#.##2.218.108:23
11#.##.155.34:23
44.##.251.100:23
92.##.50.216:23
21#.##.196.183:23
50.###.64.193:23
64.###.43.182:23
89.##.248.205:23
99.##.195.110:23
13.###.20.124:23
14#.##0.115.7:23
37.##0.38.83:23
21#.##.120.130:23
18.###.198.144:23
60.##.252.229:23
11#.##6.109.184:23
18#.##1.102.24:23
99.###.11.249:23
11#.##3.195.186:23
45.##.226.191:23
19#.##2.248.162:23
20#.##2.113.21:23
19.###.244.24:23
72.###.108.163:23
19#.##4.142.202:23
20#.##9.235.209:23
20.##4.107.7:23
31.##.189.184:23
91.##.98.75:23
22#.##6.73.119:23
18#.##.236.179:23
60.###.67.131:23
13#.##6.216.130:23
74.###.145.215:23
21#.##1.143.215:23
97.##.239.192:23
15#.##.252.30:23
10#.##7.252.147:23
20#.##1.203.145:23
58.##2.5.11:23
18#.##7.220.119:23
14.##.76.8:23
77.###.210.147:23
16#.##6.128.26:23
16#.##7.89.150:23
12#.##0.231.224:23
10#.##.147.32:23
12#.##0.225.76:23
34.##.194.87:23
18#.##.247.27:23
43.##3.1.181:23
92.###.166.71:23
20.###.127.224:23
71.##.242.231:23
70.###.170.179:23
18#.##.106.146:23
42.##.90.151:23
52.##0.63.18:23
12#.##.245.72:23
16#.##6.230.187:23
64.##.47.169:23
17#.##2.212.39:23
2.##.254.165:23
68.##.96.94:23
82.###.93.213:23
13#.##.195.193:23
11#.##0.122.184:23
15#.#.113.67:23
51.###.248.212:23
13#.##1.121.110:23
10#.##3.145.51:23
71.###.164.179:23
89.###.244.186:23
18#.##.149.221:23
14#.##4.213.156:23
17#.##8.173.148:23
10#.##.63.250:23
83.##.218.44:23
21#.##8.170.12:23
15#.##9.19.239:23
12#.##1.71.102:23
59.###.64.208:23
95.##.137.182:23
20#.##.41.146:23
40.#.179.206:23
65.##.167.31:23
18#.##.157.64:23
16#.#.137.53:23
16#.##6.153.132:23
15#.##3.61.107:23
19#.##.80.108:23
20#.##.90.107:23
21#.##4.35.164:23
40.##.158.242:23
14.###.211.237:23
18#.##4.67.114:23
11#.##9.121.137:23
17#.##8.203.26:23
92.###.153.107:23
13#.##.153.24:23
22#.##8.229.212:23
18#.##.92.202:23
10#.#7.33.49:23
14#.##0.234.211:23
27.##.18.194:23
14#.##5.80.22:23
15#.##6.192.224:23
61.##.12.145:23
61.###.109.137:23
22#.##9.49.230:23
10#.#4.59.46:23
12#.##5.40.97:23
10#.##0.74.241:23
12#.##1.80.249:23
18#.##9.27.243:23
19#.##2.64.65:23
16#.##3.72.185:23
18#.##4.247.244:23
11#.#5.225.1:23
43.##.36.118:23
17#.##1.34.127:23
13#.##.176.165:23
18#.##.161.56:23

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations