Linux.Siggen.3344

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

[md]

Kills the following processes:

run.sh

Network activity:

Awaits incoming connections on ports:

0.0.0.0:55321

Establishes connection:

20#.##6.81.105:559
8.#.8.8:53

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

Sends data to the following servers:

20#.##6.81.105:559
31.##.156.138:23
13#.##.140.139:23
67.###.216.253:23
13#.##.53.209:23
65.###.154.148:23
84.##.241.230:23
12#.##.51.120:23
75.###.227.239:23
13#.#.17.120:23
10#.##.127.66:23
11#.##9.134.56:23
19#.##.171.153:23
70.##.215.204:23
21#.#2.52.88:23
22#.##.246.165:23
53.##.62.101:23
61.###.28.203:23
13.###.104.161:23
89.##.33.161:23
69.##1.1.72:23
21#.##.242.248:23
89.###.218.244:23
21#.##0.85.136:23
10#.##.187.141:23
25.###.215.184:23
20#.##1.74.232:23
19#.##.253.121:23
61.##.30.200:23
58.###.48.189:23
12#.#7.50.94:23
20#.##3.105.127:23
19.###.159.59:23
19.###.164.93:23
52.###.124.217:23
11#.##1.96.189:23
96.###.122.214:23
10#.##.153.30:23
14#.##6.16.134:23
36.###.37.221:23
76.##.0.215:23
10#.##.168.126:23
10#.##3.108.137:23
64.##.198.55:23
65.##.27.181:23
19#.##2.64.21:23
13#.##0.193.231:23
17#.##7.8.199:23
19#.#35.7.95:23
14.##5.17.66:23
9.#.#43.121:23
71.##4.7.7:23
14#.##0.70.188:23
19#.##.187.213:23
13#.##.91.238:23
14.###.175.58:23
12.###.201.72:23
19#.##.194.224:23
23.###.84.239:23
20#.##5.48.102:23
10#.##2.45.212:23
39.##.219.255:23
76.###.126.46:23
13#.##6.77.34:23
17#.##.60.249:23
1.###.238.206:23
21#.#6.68.21:23
14.###.167.35:23
34.##6.181.8:23
97.##.59.46:23
17.###.176.37:23
91.##.146.147:23
15#.##.100.44:23
69.##.246.67:23
10#.##6.131.199:23
19#.#5.5.66:23
77.##1.3.194:23
13#.##2.135.240:23
15#.##6.127.78:23
11#.##7.59.186:23
20#.##5.184.40:23
73.###.190.156:23
14#.##.171.95:23
17#.##8.131.196:23
37.##.53.166:23
14#.#97.7.47:23
17#.##.60.180:23
58.###.229.225:23
21#.##6.42.191:23
14#.#.106.185:23
74.##.169.8:23
4.##.41.154:23
21#.##.53.171:23
14.###.179.229:23
48.##1.27.85:23
21#.##4.85.168:23
21#.##6.174.188:23
31.###.47.116:23
15#.##1.220.221:23
16#.##8.226.230:23
19.###.165.140:23
94.##.190.233:23
16#.##.229.102:23
11#.##.147.105:23
19#.#3.4.63:23
20#.##.121.199:23
71.##4.219.6:23
20#.##.112.119:23
23.##.35.66:23
34.##.92.75:23
16#.##.165.146:23
20#.##.181.165:23
16#.##1.141.159:23
15#.#7.60.10:23
19#.##0.51.43:23
21#.##.112.173:23
16#.##.20.173:23
12#.#.69.162:23
21#.##.202.200:23
21#.##2.108.18:23
13#.##1.210.44:23
16#.##2.68.41:23
34.###.189.148:23
15#.##4.164.94:23
21#.##.215.135:23
68.###.188.46:23
14#.##5.116.74:23
18#.##8.105.3:23
10#.##2.235.206:23
17#.##.252.123:23
20#.##.40.211:23
73.##0.63.3:23
19#.##.255.102:23
12#.##7.29.65:23
23.##2.77.89:23
20#.##3.52.189:23
82.##8.58.1:23
19#.##3.14.19:23
78.###.164.242:23
12#.##.35.192:23
80.##1.16.36:23
16#.#9.85.42:23
18#.##0.12.179:23
12#.##1.97.61:23
86.##.73.16:23
76.#.134.130:23
40.###.200.83:23
96.##4.204.3:23
19.##.10.201:23
57.##.230.208:23
10#.##.57.195:23
10#.##.12.212:23
19#.##8.182.45:23
11#.##.182.244:23
75.###.181.151:23
17#.##.145.107:23
11#.##4.50.181:23
74.###.226.137:23
17#.##0.188.184:23
15#.##.114.30:23
18#.##2.227.210:23
19#.##9.193.143:23
18#.##.103.26:23
62.##1.2.43:23
17#.##0.112.170:23
99.###.13.239:23
21#.##8.215.167:23
16#.##6.171.145:23
50.###.49.202:23
12#.##4.88.195:23
9.###.221.85:23
48.##.119.12:23
12.###.75.101:23
20#.##7.145.81:23
40.##.208.117:23
11#.##2.37.228:23
76.##.217.6:23
60.###.16.163:23
21#.##.41.156:23
95.#.67.124:23
13#.##8.107.184:23
82.###.91.175:23
93.###.220.55:23
92.###.180.109:23
68.###.249.135:23
17#.##9.79.61:23
71.#.23.185:23
52.##.109.4:23
21#.##2.81.85:23
87.###.189.243:23
16#.##1.120.244:23
66.#.218.241:23
13#.#3.50.71:23
15#.##1.36.135:23
18#.##.76.236:23
12.###.152.148:23
52.###.149.103:23
52.##.234.235:23
21#.#6.93.97:23
12#.#0.43.19:23
15#.##4.132.41:23
24.##.186.183:23
17.###.124.252:23
87.##4.148.1:23
10#.##.145.28:23
11#.##.154.92:23
13.###.111.159:23
61.##.238.174:23
21#.##8.248.108:23
25.##.197.130:23
77.###.227.41:23
14#.##4.250.244:23
52.###.30.141:23
18#.##.240.25:23
14#.##.194.84:23
14#.##8.221.226:23
46.###.89.250:23
12#.#10.1.11:23
71.##4.14.50:23
53.##1.16.73:23
38.##.188.128:23
60.##.116.116:23
18#.##1.129.196:23
20#.##8.236.142:23
20#.##9.250.4:23
21#.##2.99.207:23
12#.#.190.48:23
19#.##5.115.133:23
40.##.229.56:23
35.###.186.197:23
88.##7.161.2:23
63.###.122.132:23
11#.##.54.168:23
16#.##.209.177:23
91.###.241.40:23
4.###.172.236:23
50.##.251.187:23
31.###.213.101:23
21#.##.151.208:23
67.##.29.209:23
16#.#8.13.35:23
19#.#5.42.19:23
39.###.103.183:23
25.###.153.209:23
18#.##.33.184:23
10#.##.184.62:23
66.##.241.6:23
14#.##.162.114:23
12#.##8.23.139:23
10#.#.8.27:23
13#.#5.4.11:23
13#.##4.87.73:23
16#.##9.91.236:23
98.##.35.74:23
86.##.125.6:23
11#.##0.112.110:23
21#.##.158.240:23
52.##.93.167:23
95.###.23.222:23
42.###.131.32:23
17#.##0.153.199:23
64.###.125.249:23
25.##.160.226:23
10#.##1.248.59:23
20#.##0.152.227:23
20#.##.170.50:23
17#.#3.65.92:23
77.##.158.164:23
17.##2.30.86:23
39.##.55.216:23
77.##7.78.7:23
11#.##4.99.20:23
99.##.105.219:23
20#.##3.133.180:23
94.##.116.103:23
16#.##7.168.22:23
19#.##2.212.130:23
18#.##.152.239:23
13#.##6.45.225:23
22#.##.179.156:23
38.###.232.230:23
38.##.15.162:23
18.##1.172.5:23
19#.##1.73.226:23
13#.##4.198.144:23
12#.##7.199.19:23
17#.##.80.136:23
10#.#27.6.54:23
16#.##2.86.128:23
13#.##3.25.163:23
22#.#4.56.53:23
11#.##8.192.38:23
15#.##.191.220:23
79.##9.60.61:23
12#.##0.120.3:23
15#.##9.130.48:23
16#.##.251.23:23
16#.##0.39.22:23
93.##0.81.43:23
18#.##6.162.81:23
19#.##.249.50:23
17.###.178.73:23
18#.##.223.10:23
16#.##7.41.67:23
15#.##6.60.253:23
74.###.47.232:23
16#.##.254.91:23
14#.##5.220.24:23
18#.##0.89.119:23
16#.#.214.254:23
19#.##8.15.95:23
19#.##0.137.179:23
8.###.191.167:23
8.###.91.227:23
10#.##.147.111:23
17#.##4.99.238:23
71.##.149.187:23
13#.##.60.209:23
79.##.153.153:23
13#.##.208.15:23
64.###.205.38:23
18#.#.2.189:23
16#.##6.249.81:23
13#.##2.65.30:23
17#.#.87.211:23
27.###.210.167:23
85.##.16.151:23
17#.##7.249.164:23
19#.##1.125.243:23
13#.##.242.57:23
11#.##6.140.19:23
21#.#.190.123:23
99.##.222.86:23
16#.##9.50.84:23
15#.#.103.17:23
15#.##2.36.205:23
36.##8.42.0:23
19#.##.150.237:23
17#.##3.231.85:23
12#.##.239.227:23
84.###.156.213:23
16#.##1.171.127:23
22#.##5.101.127:23
81.##.183.182:23
17#.##.85.158:23
97.##.74.182:23
87.##.161.228:23
19.###.211.193:23
16#.##4.116.202:23
10#.##0.42.27:23
4.###.209.149:23
10#.##3.236.5:23
12#.##.22.183:23
68.##4.5.56:23
15#.##1.73.144:23
11#.##4.75.76:23
20#.##4.38.160:23
57.##.110.143:23
18#.##7.146.9:23
11#.##.56.213:23
20#.##4.202.252:23
21#.##4.40.185:23
63.##.105.227:23
48.###.67.151:23
12#.##.84.137:23
79.###.228.129:23
13#.##1.200.236:23
9.###.95.140:23
19#.#2.8.72:23
67.###.254.190:23
8.###.156.148:23
76.###.72.193:23
17#.##4.199.176:23
11#.#3.87.90:23
11#.##.153.184:23
19#.##6.92.17:23
75.###.86.226:23
17#.##3.61.52:23
17#.##5.123.193:23
38.##.162.189:23
15#.##4.116.205:23
16#.##.235.46:23
10#.#53.4.68:23
14#.##7.197.251:23
19#.##8.189.209:23
20.###.21.141:23
17#.##.21.233:23
54.##.100.162:23
11#.##4.134.219:23
12#.##.171.170:23
18#.##3.74.154:23
15#.##.26.247:23
86.##.251.46:23
20#.##6.122.115:23
48.###.87.134:23
58.###.117.225:23
2.###.180.234:23
13#.##5.184.65:23
12#.#5.1.42:23
5.#.#72.161:23
14#.##3.201.122:23
49.##.254.153:23
18.###.197.163:23
13#.##2.64.94:23
21#.##.125.32:23
10#.##5.45.225:23
39.###.160.196:23
45.###.254.69:23
12#.##1.89.205:23
25.##.211.251:23
10#.##.201.18:23
18.##.77.176:23
42.##.142.38:23
96.##.76.215:23
17#.##5.64.86:23
11#.##1.153.8:23
73.###.97.197:23
11#.##.156.169:23
17#.##.18.219:23
76.##.177.101:23
17#.##7.171.117:23
15#.##6.140.145:23
13#.##8.132.147:23
14#.##1.173.101:23
78.##.11.235:23
12#.##1.15.154:23
9.###.150.208:23
15#.##.234.98:23
18#.##3.234.157:23
20#.#9.35.75:23
17#.##.233.99:23
19#.##.134.18:23
18#.##0.230.230:23
15#.##.171.80:23
12#.##4.132.218:23
17.###.123.11:23
93.##1.26.16:23
19#.#.249.85:23
11#.##1.146.123:23
77.##.16.250:23
9.###.194.234:23
10#.##.207.204:23
21#.##.238.83:23
16#.##3.50.55:23
13#.##.12.112:23
93.###.139.128:23
13#.#.135.166:23
11#.##.136.217:23
67.##.155.232:23
13#.##1.254.91:23
13#.##3.103.60:23
13#.##1.77.175:23
12#.##0.62.17:23
89.###.169.131:23
17#.##2.15.82:23
11#.##.252.234:23
2.###.104.42:23
14#.#4.31.66:23
16#.##.70.166:23
40.##.60.210:23
16#.##.113.108:23
10#.##.200.28:23
13#.##.33.107:23
11#.##.120.22:23
18#.##6.28.172:23
99.##1.14.18:23
16#.##7.84.65:23
14#.#.234.96:23
14#.##.30.129:23
18#.##7.139.231:23
18#.##4.189.129:23
14#.##1.228.151:23
20#.##9.109.61:23
12.##.134.6:23
69.###.223.142:23
11#.##4.238.71:23
8.##.1.83:23
64.##.47.74:23
53.###.159.37:23
17#.##4.215.123:23
37.###.88.149:23
53.###.236.211:23
17#.##.208.139:23
63.###.239.73:23
71.##.39.248:23
13#.##5.124.38:23
21#.##.213.87:23
10#.#.109.226:23
16#.##.113.58:23
19#.##5.135.143:23
75.###.211.141:23
11#.##1.29.86:23
44.###.151.44:23
18#.##.15.202:23
61.###.113.75:23
95.##6.23.17:23
46.###.140.72:23
19#.##7.128.92:23
21#.##.168.229:23
79.###.167.98:23
31.###.178.255:23
71.##7.98.75:23
20#.##9.192.4:23
50.###.142.216:23
19#.##6.10.75:23
14#.##.89.241:23
78.##.42.187:23
67.###.150.144:23
79.##9.111.1:23
96.##.66.73:23
15#.##.168.94:23
21#.##0.106.254:23
13#.##.201.77:23
10#.##0.221.164:23
20#.##8.199.102:23
14#.#16.30.4:23
44.###.244.242:23
10#.##6.30.59:23
20.###.101.236:23
16#.##1.29.61:23
61.###.196.237:23
22#.#.197.224:23
15#.##9.164.23:23
19#.##9.55.37:23
12.###.84.136:23
14#.#7.4.189:23
13#.##.206.41:23
41.###.127.210:23
10#.##4.99.144:23
44.###.137.151:23
52.##.94.187:23
43.##.164.29:23
20#.##3.98.20:23
11#.##5.126.46:23
18#.##.162.238:23
78.###.134.54:23
18#.##.155.187:23
14#.##7.242.110:23
13#.##.13.161:23
14#.##6.129.216:23
47.##.115.65:23
50.###.236.227:23
22#.##0.106.85:23
14#.##3.165.198:23
77.##.85.228:23
15#.##9.202.165:23
16#.##2.75.253:23
76.###.134.89:23
98.##.151.190:23
77.##.90.92:23
85.##.28.167:23
17#.##7.10.34:23
19#.##.197.133:23
13#.##6.76.251:23
48.##0.31.26:23
22#.##9.25.66:23
54.###.241.82:23
18.###.162.10:23
85.##.145.58:23
66.##.114.108:23
11#.##1.106.66:23
14#.##.158.145:23
36.###.248.99:23
19#.##9.41.107:23
22#.##.97.146:23
18#.##5.158.176:23
19#.##.102.74:23
21#.##.225.78:23
19#.##3.123.143:23
12#.##4.17.251:23

Receives data from the following servers:

20#.##6.81.105:559

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations