Linux.Siggen.3446

Technical Information

Malicious functions:

Removes itself

Launches itself as a daemon

Substitutes application name for:

bash

Kills the following processes:

<SAMPLE>

Performs operations with the file system:

Creates or modifies files:

<SAMPLE_FULL_PATH>

Network activity:

Awaits incoming connections on ports:

19#.##8.209.50:3467

Establishes connection:

8.#.8.8:53
19#.##9.147.16:4321
37.##.150.53:7685

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

Sends data to the following servers:

19#.##9.147.16:4321
37.##.150.53:7685
0.0.0.0:0
18#.#.72.225:23
89.###.188.170:23
67.###.83.118:23
20#.##3.241.225:23
18#.##.160.249:23
75.###.45.163:23
10#.##9.192.22:23
81.###.119.68:23
23#.##8.121.153:23
10#.##.121.191:23
25#.##0.18.217:23
22.##4.9.172:23
63.##.249.63:23
15#.##5.223.88:23
13#.##.114.144:23
97.##.31.59:23
10#.#5.98.20:23
43.##.162.66:23
67.###.193.178:23
18#.##2.68.208:23
14#.##8.103.44:23
13#.#.180.48:23
25#.##0.55.174:23
66.###.205.143:23
36.##9.16.21:23
15#.#8.200.2:23
15#.##7.65.228:23
54.##.149.207:23
13#.##3.197.140:23
90.###.174.116:23
10#.##8.36.116:23
12#.##8.158.81:23
18#.##.128.244:23
28.##7.60.46:23
24.##6.19.84:23
14#.##6.240.209:23
15.###.243.243:23
23.###.16.242:23
11.##.7.16:23
57.###.248.65:23
21#.##2.20.173:23
22#.##1.231.182:23
14#.##.42.250:23
23#.##5.182.116:23
10#.##.168.251:23
10#.##.124.230:23
10#.#3.1.49:23
35.##.159.60:23
15#.##4.159.123:23
10#.##5.160.243:23
12#.##9.157.66:23
12#.##.59.182:23
69.##.72.77:23
23#.##0.62.146:23
13#.##3.60.25:23
84.##6.3.109:23
23#.##.159.222:23
73.##.246.1:23
87.##7.56.43:23
10#.#6.7.10:23
25#.##.62.171:23
27.##.15.63:23
21.###.36.100:23
17#.#5.65.3:23
10#.##0.215.18:23
12#.##3.33.21:23
20#.#61.7.82:23
14.###.134.165:23
16#.##3.160.123:23
10#.##4.44.211:23
11#.##5.103.8:23
10#.##6.239.203:23
81.##.95.167:23
22#.##.168.237:23
12#.##4.27.254:23
13#.#2.42.67:23
82.###.111.181:23
21#.##.227.84:23
22#.#8.141.4:23
19#.#8.95.73:23
86.###.226.55:23
17#.##1.40.25:23
23#.##.37.179:23
20#.##.130.243:23
72.###.38.240:23
12#.##1.34.75:23
13.#.84.56:23
93.###.218.49:23
22#.##2.102.3:23
87.##.68.194:23
12#.##4.80.126:23
18#.##0.71.184:23
96.###.197.161:23
11#.#.248.227:23
10#.#.157.202:23
36.###.61.247:23
14#.##4.141.226:23
96.##3.29.80:23
24#.##8.47.35:23
11#.##.217.102:23
15#.##8.165.19:23
12#.##8.189.22:23
20#.##.162.41:23
16#.##4.191.21:23
19#.##.228.176:23
24#.##0.246.23:23
12#.##8.248.41:23
99.##.205.59:23
24#.##.198.126:23
1.###.247.172:23
17#.#3.101.4:23
20#.##2.77.79:23
22#.##5.137.191:23
24.###.78.101:23
97.###.241.14:23
20#.#.107.20:23
20#.##9.42.211:23
27.###.244.95:23
16#.##.214.128:23
79.##.171.244:23
92.###.132.149:23
17#.##3.127.77:23
12#.##5.45.81:23
35.###.228.99:23
10.###.144.99:23
23#.##2.157.243:23
21#.##7.60.78:23
23#.##5.135.86:23
11#.##.162.231:23
16#.#.19.22:23
13#.##.33.162:23
14#.##1.222.152:23
14#.##7.121.74:23
19#.#.139.128:23
18#.##.223.55:23
99.###.110.203:23
25.##.216.163:23
20#.##9.25.189:23
18#.##.64.217:23
20#.##9.235.30:23
85.###.31.204:23
12#.#.133.82:23
16#.##0.122.16:23
22#.#5.92.50:23
53.###.173.113:23
18#.##6.123.244:23
73.###.74.157:23
21#.##8.55.126:23
22#.##.92.153:23
12#.##1.240.6:23
19#.##3.102.113:23
24#.##8.57.243:23
23#.##.150.117:23
40.##.163.189:23
23.###.137.232:23
5.##.135.96:23
59.###.253.144:23
31.###.133.229:23
17#.##7.81.217:23
19#.##.158.85:23
21#.#7.228.7:23
18#.##3.41.154:23
14#.##5.142.157:23
10#.##2.198.211:23
69.##.101.235:23
18#.##.190.101:23
16#.#4.88.42:23
12#.##7.172.222:23
13#.#.11.10:23
50.###.211.147:23
58.##.228.142:23
21#.##.16.218:23
18#.##1.111.73:23
11#.##.112.205:23
23#.##4.247.255:23
92.##2.24.18:23
45.###.104.173:23
4.###.209.30:23
22#.#8.82.14:23
81.##.249.74:23
20.##.156.11:23
22#.#5.93.4:23
19#.##2.36.76:23
17#.##2.13.42:23
20#.##.19.170:23
20#.##1.230.194:23
24.###.192.130:23
25#.##4.69.235:23
10.###.18.230:23
11#.##.148.101:23
18#.##5.181.172:23
23#.##9.93.74:23
16#.##4.236.166:23
11#.#8.3.151:23
22#.##.200.117:23
14#.##7.39.16:23
24#.##.10.139:23
22#.##2.26.188:23
20#.##7.56.200:23
23.###.70.205:23
15.###.103.156:23
19#.##.169.17:23
50.###.239.47:23
17#.##7.181.30:23
58.###.185.142:23
48.###.252.106:23
22#.##0.134.216:23
51.###.227.48:23
22#.##.13.180:23
81.###.215.43:23
29.###.163.15:23
3.###.146.232:23
84.###.165.198:23
30.##5.59.39:23
11.###.110.44:23
69.##.197.228:23
25#.##7.144.199:23
3.#.#0.61:23
11#.##1.237.34:23
15#.##3.92.157:23
25#.#44.8.33:23
95.##.113.137:23
10#.#7.88.60:23
24#.##2.119.15:23
17#.##5.180.246:23
23#.##.248.207:23
86.###.105.58:23
21.###.57.154:23
12#.#0.53.91:23
25#.##2.148.117:23
11#.##5.50.134:23
79.##.154.153:23
77.##.156.130:23
21#.##.203.75:23
22#.##1.115.41:23
35.##.54.57:23
15#.#9.6.104:23
22#.##1.226.223:23
18#.##1.94.129:23
80.###.210.129:23
52.##.125.77:23
17#.##1.222.102:23
12.##.184.152:23
13#.##2.253.105:23
23#.##8.131.38:23
16.###.163.46:23
25#.##8.197.142:23
54.###.129.145:23
19#.##4.226.98:23
47.##8.48.1:23
14#.##1.83.215:23
11#.##2.245.175:23
13#.##.252.68:23
20#.##0.10.104:23
19#.##3.76.123:23
23#.#8.82.86:23
14#.##5.93.46:23
23#.##.140.210:23
22#.##.57.238:23
25#.##.238.156:23
24#.##.168.164:23
22#.##0.167.90:23
60.###.92.103:23
35.###.228.161:23
21#.##.46.246:23
90.##.160.4:23
24#.#8.191.5:23
13#.##5.44.44:23
17#.##6.105.68:23
72.###.116.22:23
15#.##0.71.92:23
2.###.211.33:23
65.##.88.230:23
17.###.62.228:23
23#.##0.255.165:23
56.#.141.34:23
15#.##.167.159:23
10#.##.207.146:23
12.###.104.200:23
86.##.92.72:23
94.##4.20.65:23
52.###.92.120:23
20#.##.199.123:23
24#.##7.89.169:23
13#.#7.242.4:23
12#.##7.108.215:23
15.###.154.137:23
22#.#.112.15:23
17#.##3.198.130:23
86.##.156.36:23
12#.##.169.56:23
25#.##3.36.184:23
7.###.117.120:23
14#.##.23.185:23
17#.##.84.121:23
10#.##4.235.138:23
22.###.64.168:23
45.###.144.188:23
18#.#3.30.64:23
10#.##.230.183:23
11#.##.86.226:23
22#.##0.135.125:23
33.##.94.211:23
76.###.191.225:23
42.###.133.110:23
14#.##1.92.194:23
98.##.215.88:23
17#.##.247.220:23
15#.##7.229.215:23
19#.##.186.241:23
77.###.176.228:23
15#.##5.19.102:23
25.###.189.134:23
14#.##3.187.166:23
37.###.205.162:23
21#.##0.68.249:23
10#.##9.92.191:23
19#.##.21.230:23
73.###.198.18:23
18#.##8.137.171:23
82.##.46.89:23
18#.##6.108.130:23
12.###.71.196:23
71.###.209.62:23
6.###.121.179:23
10#.##5.201.52:23
48.###.41.245:23
7.###.233.25:23
29.###.182.123:23
18#.##6.150.0:23
10#.##.171.165:23
91.###.136.97:23
21#.##3.199.173:23
15#.##6.111.69:23
17.##.208.92:23
21#.##1.141.81:23
17#.##9.210.160:23
73.##.202.58:23
17#.##.83.162:23
21#.##.159.74:23
14#.#6.85.34:23
6.##.77.22:23
6.###.73.114:23
65.##.184.32:23
25#.#5.94.46:23
19#.##7.166.95:23
16#.##7.132.220:23
17#.##0.13.228:23
25#.##6.242.115:23
25#.##4.145.224:23
20#.##.208.104:23
16#.##1.242.114:23
24#.##6.190.104:23
48.##.185.129:23
15#.##6.51.125:23
19#.#1.79.40:23
20#.##2.244.234:23
47.##.134.35:23
12#.##9.47.152:23
56.###.72.117:23
10#.##2.253.248:23
16#.##9.42.239:23
11#.##2.1.159:23
12#.##9.212.222:23
15#.##.58.232:23
16#.##.244.190:23
24.###.169.141:23
50.##.207.57:23
68.##.114.234:23
52.###.217.88:23
89.###.162.163:23
17#.##8.190.76:23
10#.##9.9.133:23
15#.##8.111.146:23
71.##.234.215:23
12#.##6.27.171:23
12#.##7.225.57:23
25#.##.124.83:23
24#.##4.78.17:23
18#.##.174.222:23
20#.##8.16.131:23
44.##8.35.79:23
55.##.127.38:23
13.##2.10.86:23
91.###.114.77:23
37.###.240.198:23
17#.##4.242.133:23
67.###.158.66:23
19#.##1.87.195:23
21#.##6.139.213:23
14#.##.140.190:23
23.##.178.111:23
12#.#.116.105:23
13#.##9.91.137:23
17.###.128.233:23
19#.##.143.183:23
38.##.22.122:23
22.###.242.137:23
24.###.173.116:23
16#.##2.112.212:23
11#.##2.202.233:23
19#.##5.219.144:23
96.##.151.152:23
71.##.192.6:23
15#.#1.20.96:23
47.###.229.138:23
21#.##9.44.154:23
15#.#07.4.28:23
20#.#0.1.186:23
40.###.12.158:23
47.##.28.42:23
63.##.37.100:23
10#.##0.13.135:23
17#.##.165.80:23
25.#.255.90:23
15#.##.87.247:23
30.##.46.160:23
21#.##.155.108:23
54.##.159.13:23
12#.##5.57.78:23
25#.##.58.189:23
21#.##1.85.73:23
32.###.183.159:23
25#.##.123.16:23
10.###.71.250:23
18#.##7.103.147:23
21#.#9.43.40:23
13#.#3.43.43:23
16#.##5.151.139:23
19#.#.234.141:23
24#.#0.46.64:23
46.##.216.119:23
60.###.183.17:23
18#.##.211.133:23
23#.##.211.12:23
21.##.255.245:23
12#.##4.158.40:23
53.##7.29.68:23
13#.##.150.142:23
24#.##.122.123:23
19#.##5.246.156:23
14#.##1.238.95:23
11#.##3.254.237:23
19#.##.198.116:23
57.###.200.53:23
24#.#40.55.2:23
17#.##.247.212:23
25#.##1.244.47:23
17#.##.132.191:23
8.###.54.73:23
15.##.162.111:23
17#.##.102.40:23
22#.##0.213.115:23
24#.##3.127.64:23
21#.##4.208.36:23
64.###.213.214:23
16#.##5.127.64:23
12#.##.90.254:23
16#.##9.86.156:23
20#.##8.240.30:23
20#.##.137.126:23
12#.#2.15.35:23
20#.##5.207.78:23
15#.##.110.54:23
7.###.44.50:23
17#.##2.108.118:23
22#.##6.190.152:23
10#.##0.136.119:23
22#.##5.180.202:23
32.###.235.114:23
4.###.98.172:23
29.###.145.70:23
22#.##8.187.171:23
88.###.239.91:23
21.##5.65.0:23
28.###.215.195:23
16#.##.144.90:23
22#.##.17.180:23
18#.#7.10.71:23
86.###.204.170:23
21#.##.176.176:23
3.###.9.85:23
21#.##8.171.56:23
44.###.184.197:23
66.###.221.44:23
18#.##0.81.31:23
46.##.216.200:23
10#.##1.192.96:23
99.###.157.252:23
24#.##9.69.155:23
15#.##.59.118:23
94.##9.30.82:23
23.##.176.198:23
17#.##.113.62:23
13#.##4.113.233:23
77.##0.86.29:23
25#.##1.159.247:23
24#.##3.139.253:23
24#.#6.131.6:23
13#.##6.52.164:23
24#.##.87.214:23
23#.##.213.167:23
24#.##.248.233:23
19#.##3.136.99:23
17#.##0.110.96:23
34.###.138.44:23
24#.#.37.152:23
17#.##.137.25:23
24#.##9.244.77:23
22#.##8.61.244:23
54.###.38.222:23
23#.#2.10.84:23
15#.##3.248.68:23
70.###.28.172:23
95.##.111.166:23
24#.##9.154.244:23
22.###.117.38:23
22#.##3.170.122:23
10#.##.141.150:23
19#.##0.37.15:23
22#.##8.229.179:23
70.###.108.24:23

Receives data from the following servers:

37.##.150.53:7685
19#.##9.147.16:4321

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations