Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Linux.Siggen.3579

Added to the Dr.Web virus database: 2021-02-05

Virus description added:

Technical Information

Malicious functions:
Launches itself as a daemon
Substitutes application name for:
  • bash
Kills the following processes:
  • <SAMPLE>
Network activity:
Awaits incoming connections on ports:
  • 19#.##8.200.50:3467
Establishes connection:
  • 8.#.8.8:53
  • 37.##.150.124:4321
  • 19#.##.245.208:53
Attacks using a special dictionary (brute-force technique) via the Telnet protocol.
DNS ASK:
  • ri##r.cc
Sends data to the following servers:
  • 37.##.150.124:4321
  • 14#.##1.161.72:23
  • 44.#.8.137:23
  • 18.###.59.204:23
  • 22#.##3.193.231:23
  • 54.###.178.44:23
  • 22#.##.102.53:23
  • 14#.##6.52.25:23
  • 6.###.101.25:23
  • 16#.##6.120.7:23
  • 50.##8.86.76:23
  • 61.###.231.170:23
  • 52.###.154.223:23
  • 20#.#3.72.64:23
  • 41.##.244.155:23
  • 22#.##5.252.234:23
  • 10.##6.10.11:23
  • 51.##.158.189:23
  • 31.##.122.151:23
  • 22#.##6.138.7:23
  • 14#.##2.97.79:23
  • 21#.##.137.70:23
  • 12#.##.34.245:23
  • 17#.##7.16.12:23
  • 98.##.47.51:23
  • 36.##9.72.38:23
  • 14#.##1.130.244:23
  • 21#.##7.222.29:23
  • 11#.#9.94.94:23
  • 11#.##.26.206:23
  • 70.##.216.247:23
  • 93.##.204.145:23
  • 12#.##3.81.129:23
  • 45.###.30.115:23
  • 15#.##.251.149:23
  • 18#.##.177.151:23
  • 10#.##8.145.51:23
  • 12.#.45.95:23
  • 15#.##1.98.245:23
  • 21#.##1.190.158:23
  • 17#.##.224.239:23
  • 14#.##0.242.204:23
  • 14#.##9.175.78:23
  • 17#.##.232.40:23
  • 13#.##.107.194:23
  • 24#.##2.245.20:23
  • 11#.##5.208.102:23
  • 10#.##.197.182:23
  • 28.##.125.161:23
  • 81.###.162.92:23
  • 28.###.145.190:23
  • 15#.##.225.49:23
  • 32.##.28.137:23
  • 43.###.133.75:23
  • 16#.##8.36.131:23
  • 16#.##4.202.235:23
  • 16#.##.233.21:23
  • 20#.##1.194.0:23
  • 21.###.100.34:23
  • 19#.#.213.231:23
  • 16#.##4.158.116:23
  • 12#.##8.148.191:23
  • 10.##.235.241:23
  • 13#.##.89.173:23
  • 89.##.16.31:23
  • 32.###.165.24:23
  • 18#.##0.31.35:23
  • 21#.##1.225.31:23
  • 21#.##5.15.32:23
  • 12#.##2.248.29:23
  • 71.###.206.39:23
  • 18#.##8.38.175:23
  • 34.#.4.253:23
  • 21#.##.203.18:23
  • 19#.##.20.205:23
  • 17#.##0.53.140:23
  • 19#.#0.95.51:23
  • 54.##.255.183:23
  • 13.###.105.200:23
  • 96.###.112.135:23
  • 13#.##8.240.9:23
  • 83.###.160.253:23
  • 62.###.43.162:23
  • 86.###.137.253:23
  • 61.###.191.251:23
  • 65.##.46.169:23
  • 24#.##6.203.94:23
  • 14#.##7.77.85:23
  • 15#.##7.244.240:23
  • 93.###.38.181:23
  • 99.###.156.56:23
  • 21#.##.177.142:23
  • 83.##.148.21:23
  • 18#.##6.162.154:23
  • 16#.##.148.192:23
  • 12#.##7.246.112:23
  • 20#.##2.166.76:23
  • 89.###.51.132:23
  • 14#.##7.195.207:23
  • 67.###.113.82:23
  • 18#.#.148.129:23
  • 30.###.150.157:23
  • 15#.##7.28.93:23
  • 13#.##7.54.149:23
  • 10#.##6.127.100:23
  • 26.##.228.172:23
  • 15#.##.53.114:23
  • 7.###.57.126:23
  • 11#.#8.39.15:23
  • 22.###.191.83:23
  • 13#.##.136.131:23
  • 37.###.54.238:23
  • 11#.##.182.215:23
  • 60.##2.9.151:23
  • 23#.##.220.171:23
  • 6.###.240.209:23
  • 23#.##9.151.128:23
  • 87.##0.3.9:23
  • 77.##7.14.12:23
  • 13#.##3.191.35:23
  • 48.##.69.188:23
  • 99.##8.168.6:23
  • 19#.#94.21.0:23
  • 13#.##3.179.48:23
  • 5.###.50.147:23
  • 4.###.22.20:23
  • 23#.##.158.128:23
  • 34.###.108.219:23
  • 17#.##.246.200:23
  • 13.###.40.245:23
  • 24#.##.214.63:23
  • 10#.##8.73.37:23
  • 16#.##.192.230:23
  • 6.##.146.251:23
  • 16#.#3.65.61:23
  • 23#.#44.21.4:23
  • 48.###.188.147:23
  • 14#.##.201.128:23
  • 25#.##6.41.238:23
  • 96.##.90.35:23
  • 12#.##7.167.192:23
  • 14#.##5.16.58:23
  • 16#.##.190.132:23
  • 37.##.125.226:23
  • 24#.##.245.167:23
  • 19#.#3.7.91:23
  • 70.###.70.235:23
  • 88.###.135.78:23
  • 92.###.186.135:23
  • 21#.##0.157.88:23
  • 20#.##8.79.177:23
  • 25.##.253.180:23
  • 19#.##7.115.19:23
  • 17#.##4.86.58:23
  • 39.#.112.142:23
  • 40.###.248.211:23
  • 14#.##1.231.162:23
  • 10#.##2.146.187:23
  • 11#.##8.203.64:23
  • 24#.##8.132.121:23
  • 83.###.203.242:23
  • 21#.##9.252.36:23
  • 10#.##2.229.124:23
  • 12#.##1.251.14:23
  • 12.##.117.233:23
  • 55.###.35.141:23
  • 16#.#3.8.200:23
  • 24#.#2.33.24:23
  • 13#.##4.90.58:23
  • 15#.##.117.209:23
  • 13#.##8.203.46:23
  • 19#.#.255.52:23
  • 14#.##8.116.97:23
  • 22#.##.42.166:23
  • 33.###.227.48:23
  • 19#.##.111.183:23
  • 34.##.72.172:23
  • 11.###.134.232:23
  • 22#.##9.220.117:23
  • 18#.##9.96.172:23
  • 34.###.169.207:23
  • 19#.#25.52.5:23
  • 84.###.163.199:23
  • 22#.##9.20.171:23
  • 70.###.108.63:23
  • 21#.##.190.56:23
  • 15#.##.225.133:23
  • 18#.##.254.143:23
  • 26.##.114.158:23
  • 12#.##.172.110:23
  • 50.###.159.23:23
  • 10#.##8.215.81:23
  • 35.###.179.15:23
  • 14#.#7.51.15:23
  • 42.###.163.211:23
  • 24#.##9.20.209:23
  • 13#.##7.45.191:23
  • 1.###.240.23:23
  • 13#.##2.130.253:23
  • 24#.##.138.219:23
  • 21#.##4.95.150:23
  • 67.###.170.110:23
  • 11#.##.38.187:23
  • 54.###.235.113:23
  • 21#.##0.233.145:23
  • 77.#.190.225:23
  • 95.###.152.151:23
  • 56.###.96.170:23
  • 62.##.55.20:23
  • 19#.#.184.213:23
  • 59.###.89.102:23
  • 24#.#6.16.94:23
  • 79.###.236.220:23
  • 51.###.192.204:23
  • 24#.#.26.183:23
  • 15#.##5.148.175:23
  • 15#.##2.213.208:23
  • 10#.##.131.16:23
  • 25.###.116.13:23
  • 98.###.242.54:23
  • 44.###.186.170:23
  • 25#.##5.162.144:23
  • 31.##.65.225:23
  • 10#.##0.69.26:23
  • 16#.##4.47.69:23
  • 19#.##.50.237:23
  • 22#.##3.117.80:23
  • 37.###.103.134:23
  • 18#.##8.38.83:23
  • 16#.##4.242.182:23
  • 19#.#20.7.58:23
  • 64.##.82.15:23
  • 13.##.157.133:23
  • 21#.##.47.212:23
  • 14#.##3.151.98:23
  • 15.###.89.224:23
  • 76.###.182.162:23
  • 21#.##1.121.143:23
  • 12#.#13.7.57:23
  • 45.##.81.92:23
  • 23#.#1.95.81:23
  • 16#.##1.159.229:23
  • 33.##.228.172:23
  • 64.##.142.199:23
  • 32.###.72.166:23
  • 14#.##8.216.105:23
  • 16#.##7.207.49:23
  • 85.###.98.140:23
  • 94.##.229.173:23
  • 62.##.211.14:23
  • 52.###.219.153:23
  • 86.###.222.122:23
  • 61.###.202.132:23
  • 24#.##.49.252:23
  • 19#.##1.153.139:23
  • 20.#.99.211:23
  • 13#.#8.89.91:23
  • 13#.##1.64.206:23
  • 23#.##5.134.47:23
  • 98.###.135.68:23
  • 12#.##7.3.152:23
  • 17#.##.199.220:23
  • 92.##.212.174:23
  • 81.###.220.164:23
  • 94.##3.54.82:23
  • 14#.#.148.210:23
  • 11#.##.25.114:23
  • 20#.##4.124.237:23
  • 24#.##3.196.27:23
  • 10#.#8.43.64:23
  • 14#.##5.51.201:23
  • 10#.##.151.161:23
  • 11#.#9.48.87:23
  • 46.###.106.168:23
  • 15#.##.140.20:23
  • 16#.##.205.21:23
  • 16#.#.208.95:23
  • 14#.##.243.247:23
  • 33.###.104.59:23
  • 12#.##.223.114:23
  • 10#.##3.231.14:23
  • 6.#.#09.234:23
  • 47.##.164.191:23
  • 37.##6.163.6:23
  • 19#.##6.91.137:23
  • 17#.##.78.160:23
  • 15#.##1.194.158:23
  • 21#.##3.183.168:23
  • 20#.##.250.103:23
  • 23.##.182.253:23
  • 19#.##9.32.210:23
  • 13#.##9.235.216:23
  • 24#.##5.136.103:23
  • 22#.#.221.201:23
  • 14#.##.156.119:23
  • 89.##.236.22:23
  • 16#.##.184.66:23
  • 16#.##.208.225:23
  • 12#.##0.79.217:23
  • 93.###.221.221:23
  • 24#.##1.181.84:23
  • 97.###.68.152:23
  • 10#.##9.19.33:23
  • 19#.##0.232.179:23
  • 10#.##.185.104:23
  • 22.###.23.188:23
  • 20#.##2.114.187:23
  • 17#.##7.40.202:23
  • 11#.##.22.227:23
  • 18#.#2.23.82:23
  • 11#.##8.43.237:23
  • 17.##.253.215:23
  • 13#.##.211.146:23
  • 17#.#3.52.18:23
  • 15#.##4.14.189:23
  • 80.##.249.112:23
  • 54.###.127.155:23
  • 39.##9.84.80:23
  • 46.###.253.194:23
  • 56.###.138.54:23
  • 87.##.20.49:23
  • 10#.##.168.109:23
  • 15#.#1.236.7:23
  • 13#.##7.35.107:23
  • 18#.##5.197.88:23
  • 19#.##1.124.158:23
  • 22#.##0.142.251:23
  • 25#.##8.129.67:23
  • 20#.##2.29.108:23
  • 21.###.208.54:23
  • 67.###.172.135:23
  • 11#.#1.170.9:23
  • 23#.##8.141.60:23
  • 12#.##0.149.6:23
  • 20#.##.164.39:23
  • 13#.##4.27.15:23
  • 94.##3.91.40:23
  • 10#.##0.136.116:23
  • 27.###.153.187:23
  • 23#.##.231.200:23
  • 15.##.62.21:23
  • 17#.##3.77.234:23
  • 18#.##.106.171:23
  • 17#.##0.104.189:23
  • 28.###.135.234:23
  • 19#.##2.87.52:23
  • 7.###.184.77:23
  • 11#.##0.163.39:23
  • 79.##.61.8:23
  • 13#.##1.76.120:23
  • 59.##.198.152:23
  • 22#.##3.159.152:23
  • 18#.#25.2.20:23
  • 38.##1.245.8:23
  • 22#.#43.4.96:23
  • 18.##.202.252:23
  • 23#.##8.71.40:23
  • 21#.##5.34.16:23
  • 20#.##2.186.77:23
  • 22#.##.81.218:23
  • 21#.##9.64.190:23
  • 12#.#.153.35:23
  • 16#.##8.130.73:23
  • 15#.##4.222.214:23
  • 12#.##.163.78:23
  • 94.###.83.100:23
  • 10#.#.181.38:23
  • 21#.##8.79.229:23
  • 18#.##8.239.76:23
  • 20#.##1.102.110:23
  • 19#.##7.187.23:23
  • 14#.#5.63.47:23
  • 21.###.117.190:23
  • 38.###.185.141:23
  • 90.###.148.121:23
  • 13#.##6.122.140:23
  • 19.##7.76.95:23
  • 15#.##1.53.252:23
  • 85.##.197.187:23
  • 19#.##.119.207:23
  • 20#.##3.62.65:23
  • 12#.##1.181.248:23
  • 18#.##2.81.102:23
  • 20#.##.149.116:23
  • 18.##.47.35:23
  • 51.###.225.126:23
  • 19#.##1.251.252:23
  • 20#.#4.5.209:23
  • 21#.##9.251.179:23
  • 19#.#3.70.86:23
  • 24#.##.149.118:23
  • 20#.##8.243.192:23
  • 22#.##.128.209:23
  • 78.###.153.44:23
  • 85.##.239.216:23
  • 23#.##1.97.55:23
  • 12#.#4.21.69:23
  • 22#.##9.122.44:23
  • 91.##.184.224:23
  • 89.###.126.96:23
  • 19#.##3.31.203:23
  • 24#.##8.159.132:23
  • 42.##.73.189:23
  • 19#.##1.186.58:23
  • 24#.#.167.204:23
  • 97.###.218.18:23
  • 12#.##3.3.135:23
  • 22.###.241.106:23
  • 12#.##8.101.171:23
  • 12#.##7.19.201:23
  • 13#.##6.46.222:23
  • 18#.##9.76.99:23
  • 55.###.113.75:23
  • 24#.##3.4.232:23
  • 18#.##9.81.86:23
  • 20#.##8.126.235:23
  • 21#.##4.88.222:23
  • 25#.##1.35.130:23
  • 24#.##6.153.90:23
  • 22#.##.241.35:23
  • 17#.#24.78.5:23
  • 26.##.4.111:23
  • 23#.##2.83.200:23
  • 8.#.#24.64:23
  • 23#.##7.46.241:23
  • 17#.##.102.57:23
  • 64.##.210.70:23
  • 16#.##.146.226:23
  • 50.##.244.110:23
  • 12#.##.143.206:23
  • 10#.##5.44.109:23
  • 10#.##.229.31:23
  • 65.##.194.207:23
  • 16.###.175.47:23
  • 22#.##0.41.57:23
  • 11#.##7.52.219:23
  • 18#.##4.2.183:23
  • 10#.##0.251.48:23
  • 20#.##.164.61:23
  • 19#.##8.17.188:23
  • 11#.##2.242.65:23
  • 91.###.188.210:23
  • 14#.#9.3.6:23
  • 12#.##6.162.234:23
  • 33.##.234.54:23
  • 19#.#.53.193:23
  • 19#.##.176.235:23
  • 52.##.82.154:23
  • 11#.##.221.101:23
  • 85.#.128.183:23
Receives data from the following servers:
  • 37.##.150.124:4321

Curing recommendations


Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

One month (no registration) or three months (registration and renewal discount)

Download Dr.Web

Download by serial number