Linux.Siggen.3831

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

Network activity:

Awaits incoming connections on ports:

127.0.0.1:63841

Establishes connection:

8.#.8.8:53
20#.##.211.199:8080
18#.##0.178.18:8080
18#.###.164.203:8080
18#.##.19.18:8080
20#.##.221.194:8080
18#.###.153.148:8080
84.###.204.204:80
18#.#44.1.83:80
19#.##.189.170:80
21#.##8.192.110:80
31.##7.250.3:80
37.###.54.211:80
18#.##.18.232:52869
16#.##1.244.1:52869
16#.##.189.170:52869
94.###.54.211:52869
62.###.110.163:52869
83.###.247.250:52869
34.###.129.45:52869
44.##.252.137:52869
22#.##.22.83:52869
10#.##.211.196:52869
18#.##.18.232:8080
16#.##.189.170:8080
16#.##1.244.1:8080
62.###.110.163:8080
83.###.247.250:8080
94.###.54.211:8080
44.##.252.137:8080
10#.##.211.196:8080
34.###.129.45:8080
22#.##.22.83:8080
22#.#9.22.83:80
11#.###.156.221:37215
63.###.6.215:37215
20#.###.103.213:37215
71.##.29.3:37215
13#.##8.96.91:37215
20#.###.103.213:7574
20#.##5.103.213:80
22#.##8.175.235:81
22#.##8.175.235:80
22#.###.175.235:49152
49.###.89.155:8443
49.###.89.155:8080
18#.##.18.232:80
62.###.110.163:80
83.###.247.250:80
16#.##1.244.1:80
16#.##.189.170:80
94.###.54.211:80
44.##.252.137:80
10#.##.211.196:80
34.###.129.45:80
18#.##.122.133:8080
20#.###.150.108:8080
20#.##.252.154:8080
20#.##7.88.251:8080
18#.##.94.130:8080
18#.##.204.58:8080
84.###.150.108:80
10#.##.252.154:80
14#.##7.88.251:80
42.##.122.133:80
14#.##.94.130:80
10#.##.204.58:80
20#.###.103.213:5555
30.##.78.122:52869
12#.##.104.155:52869
11#.###.150.108:52869
93.###.154.49:52869
27.###.237.88:52869
21#.##.204.58:52869
90.##.78.214:52869
49.##.87.243:52869
89.###.114.93:52869
12#.###.153.250:52869
47.###.105.128:8080
28.###.176.117:8080
12#.##9.61.116:8080
68.###.47.149:8080
16#.###.173.245:8080
17#.##.150.93:8080
18#.##.179.13:8080
48.#.#2.165:8080
19#.##.27.55:8080
19#.#.55.245:8080
28.###.176.117:37215
47.###.105.128:37215
16#.###.173.245:37215
12#.###.61.116:37215
68.###.47.149:37215
28.###.176.117:7574
68.###.107.224:80
68.###.107.224:81
11#.##3.57.83:49152
11#.##3.57.83:8443
11#.##3.57.83:8080
10#.##1.4.185:8080
28.###.176.117:80
47.###.105.128:80
12#.##9.61.116:80
16#.##8.173.245:80
68.###.47.149:80
19#.#1.27.55:80
48.#.12.165:80
19#.#.55.245:80
18#.##.179.13:80
17#.##.150.93:80
18#.##.231.216:8080
18#.##6.100.37:8080
20#.##.113.133:8080
18#.###.164.142:8080
18#.###.198.238:8080
18#.##2.7.164:8080
18#.##6.100.37:80
92.##.231.216:80
11#.##.113.133:80
62.##2.7.164:80
41.###.164.142:80
5.###.198.238:80
28.###.176.117:5555
22#.##9.55.70:52869
13#.###.237.118:52869
15#.###.149.139:52869
51.###.153.225:52869
17#.##3.22.98:52869
23#.###.221.239:52869
10#.###.85.242:52869
18#.###.147.67:52869
87.###.137.61:52869
20.###.179.200:52869
22#.##9.55.70:8080
17#.##3.22.98:8080
13#.###.237.118:8080
15#.###.149.139:8080
23#.###.221.239:8080
22#.##9.55.70:80
23#.##9.221.239:80
51.###.153.225:8080
87.###.137.61:8080
20.###.179.200:8080
18#.##2.147.67:8080
10#.##3.85.242:8080
15#.###.149.139:37215
17#.##3.22.98:37215
13#.###.237.118:37215
22#.##9.55.70:37215
23#.###.221.239:37215
14#.##.23.158:7574
14#.##.23.158:80
14#.##.23.158:81
49.##.14.45:80
49.##.14.45:49152
49.##.14.45:8443
16#.##4.13.66:8080
13#.##7.237.118:80
15#.##2.149.139:80
17#.##3.22.98:80
51.###.153.225:80
20.###.179.200:80
18#.##2.147.67:80
87.###.137.61:80
10#.##3.85.242:80
18#.##.152.145:8080
20#.##9.178.17:8080
18#.##0.43.3:8080
20#.##0.25.94:8080
18#.##.90.174:8080
18#.##.141.116:8080
78.###.109.233:80
17#.##3.160.172:80
88.###.133.163:80
19#.##.169.110:80
1.###.97.47:80
14#.##7.74.136:80
14#.##.23.158:5555
14.###.88.157:52869
14#.###.142.109:52869
9.###.163.127:52869
20#.###.160.172:52869
86.###.97.47:52869
18#.##1.27.31:52869
22.###.19.169:52869
22#.##2.12.58:52869
49.###.26.110:52869
21#.##.168.121:52869
14#.###.142.109:8080
20#.###.160.172:8080
14.###.88.157:8080
86.###.97.47:8080
9.###.163.127:8080
22.###.19.169:8080
49.###.26.110:8080
18#.##1.27.31:8080
22#.##2.12.58:8080
22#.##2.12.58:80
21#.##.168.121:8080
14#.###.79.230:37215
79.###.121.39:37215
96.###.132.134:37215
82.###.213.145:37215
83.#.#27.172:37215
82.###.213.145:7574
82.###.213.145:80
15#.##1.200.0:81
15#.##1.200.0:80
15#.##1.200.0:49152
13#.##.51.92:8443
13#.##.51.92:8080
20#.##3.160.172:80
14#.##6.142.109:80
14.###.88.157:80
86.##7.97.47:80
9.###.163.127:80
22.###.19.169:80
49.###.26.110:80
18#.##1.27.31:80
21#.##.168.121:80
20#.##.91.107:8080
20#.##4.175.44:8080
18#.###.212.102:8080
18#.##.35.93:8080
20#.##.47.118:8080
20#.##.45.39:8080
37.###.173.73:80
2.#.#62.106:80
5.###.112.197:80
1.##.176.228:80
1.###.224.132:80
17#.##3.102.73:80
82.###.213.145:5555
23.##.30.158:52869
21#.##9.0.162:52869
22#.###.173.73:52869
97.###.228.130:52869
83.###.208.224:52869
18#.###.102.73:52869
41.##.66.221:52869
42.###.225.121:52869
18#.##.124.3:52869
12.###.38.196:52869
18.##.172.225:8080
12#.##4.144.93:8080
73.##.59.9:8080
12#.##2.32.211:8080
77.###.155.52:8080
95.###.218.68:8080
10#.##.43.155:8080
16#.##.207.211:8080
55.##.92.77:8080
18#.##.134.40:8080
77.###.155.52:37215
73.##.59.9:37215
18.##.172.225:37215
12#.###.144.93:37215
95.###.218.68:37215
77.###.155.52:7574
21#.#3.72.36:80
21#.#3.72.36:81
21#.##.72.36:49152
74.###.159.245:8443
74.###.159.245:8080
18.##.172.225:80
12#.##4.144.93:80
73.##.59.9:80
12#.##2.32.211:80
77.###.155.52:80
95.###.218.68:80
10#.##.43.155:80
16#.##.207.211:80
55.##.92.77:80
18#.##.134.40:80
20#.##.167.146:8080
20#.###.183.209:8080
20#.##.22.212:8080
20#.###.204.177:8080
20#.##8.46.171:8080
20#.##4.117.37:8080
18#.##.167.146:80
19#.##8.183.209:80
31.##.22.212:80
5.###.46.171:80
62.###.204.177:80
14#.##4.117.37:80
77.###.155.52:5555
24.##.167.146:52869
13.##.218.183:52869
55.##.212.168:52869
22#.###.189.114:52869
88.###.117.37:52869
3.###.217.238:52869
3.###.141.204:52869
18#.##.233.120:52869
2.###.203.103:52869
1.###.167.125:52869
43.###.158.4:8080
27.##.25.40:8080
15.###.180.82:8080
56.##.28.212:8080
10#.##.251.51:8080
16#.###.149.126:8080
17#.##6.126.20:8080
26.###.118.30:8080
22#.##.188.227:8080
20#.##3.70.17:8080
22#.##.188.227:80
15.###.180.82:37215
27.##.25.40:37215
43.###.158.4:37215
56.##.28.212:37215
10#.##.251.51:37215
27.##.25.40:7574
18#.##.187.134:80
18#.##.187.134:81
5.##.#7.169:49152
5.##.#7.169:8443
21#.##.184.17:23
5.##.#7.169:8080
22#.##.147.235:8080
43.##3.158.4:80
15.###.180.82:80
56.##.28.212:80
27.##.25.40:80
10#.##.251.51:80
26.###.118.30:80
17#.##6.126.20:80
16#.##0.149.126:80
20#.##3.70.17:80
20#.##7.52.24:8080
18#.##5.149.81:8080
20#.##6.145.97:8080
20#.#.192.217:8080
20#.##6.29.150:8080
18#.##.147.202:8080
21#.##6.145.97:80
11#.#.192.217:80
95.###.29.150:80
2.###.52.24:80
5.###.149.81:80
14#.##.147.202:80
27.##.25.40:5555
13#.###.110.178:52869
78.###.231.251:52869
10#.###.152.159:52869
92.##.67.61:52869
13#.###.193.142:52869
15#.##2.41.29:52869
17#.###.150.36:52869
18#.##.0.143:52869
17.##.48.161:52869
19#.###.29.200:52869
78.###.231.251:8080
13#.###.110.178:8080
10#.###.152.159:8080
15#.##2.41.29:8080
13#.###.193.142:8080
17#.##7.150.36:8080
18#.##.0.143:8080
17.##.48.161:8080
92.##.67.61:8080
19#.##1.29.200:8080
10#.###.152.159:37215
78.###.231.251:37215
13#.###.110.178:37215
15#.##2.41.29:37215
13#.###.193.142:37215
16#.#.159.5:7574
16#.#.159.5:80
16#.#.159.5:81
12#.##8.178.49:80
12#.###.178.49:49152
12#.##8.178.49:8443
13#.##8.15.47:8080
15#.##2.41.29:80
13#.##5.110.178:80
10#.##3.152.159:80
18#.#7.0.143:80
13#.##4.193.142:80
17#.##7.150.36:80
92.##.67.61:80
78.###.231.251:80
17.##.48.161:80
19#.##1.29.200:80
20#.##.16.114:8080
20#.##5.195.93:8080
18#.##8.1.148:8080
18#.##.213.111:8080
20#.##.140.3:8080
18#.##2.81.124:8080
31.##9.59.96:80
21#.##.84.111:80
88.###.137.108:80
42.##8.50.98:80
21#.##3.131.23:80
92.##0.79.94:80
16#.#.159.5:5555
17#.###.210.137:52869
17#.##9.59.96:52869
11#.##.98.50:52869
58.##.11.242:52869
17#.###.213.131:52869
61.###.27.53:52869
12#.#.129.170:52869
2.###.79.94:52869
10#.###.157.90:52869
15#.###.99.115:52869
58.##.11.242:8080
17#.###.210.137:8080
11#.##.98.50:8080
17#.##9.59.96:8080
17#.###.213.131:8080
2.###.79.94:8080
61.###.27.53:8080
12#.#.129.170:8080
12#.#.129.170:80
10#.##0.157.90:8080
15#.##0.99.115:8080
11#.###.124.60:37215
64.###.81.5:37215
19#.###.239.141:37215
18#.###.211.219:37215
89.###.220.136:37215
64.###.81.5:7574
64.##8.81.5:80
19#.##.87.207:81
19#.##.87.207:80
19#.##.87.207:49152
19#.##.87.207:8443
15#.##.82.159:8080
17#.##9.210.137:80
17#.##9.59.96:80
17#.##1.213.131:80
11#.#0.98.50:80
58.##.11.242:80
2.###.79.94:80
15#.##0.99.115:80
61.##1.27.53:80
10#.##0.157.90:80
20#.##.193.130:8080
18#.##7.44.213:8080
20#.##.159.207:8080
18#.#.229.123:8080
20#.##6.221.71:8080
20#.##8.185.29:8080
41.#.21.46:80
5.###.176.37:80
82.###.189.93:80
21#.##.194.38:80
42.###.48.166:80
5.###.131.252:80
64.###.81.5:5555
19#.#.21.46:52869
64.###.110.176:52869
19#.##.106.48:52869
14#.#.123.110:52869
59.###.93.16:52869
9.###.131.252:52869
61.##.11.170:52869
19#.###.203.21:52869
8.##.#.216:52869
14#.##3.9.88:52869
59.###.93.16:8080
64.###.110.176:8080
19#.#.21.46:8080
14#.#.123.110:8080
19#.##.106.48:8080
9.###.131.252:8080
8.##.3.216:8080
61.##.11.170:8080
19#.##1.203.21:8080
14#.##3.9.88:8080
11#.##.235.200:37215
92.###.124.41:37215
18#.###.201.219:37215
10#.##.215.225:37215
82.###.241.226:37215
11#.##.235.200:7574
73.###.30.231:80
73.###.30.231:81
73.###.30.231:49152
14#.###.131.112:8443
14#.###.131.112:8080
19#.#.21.46:80
9.###.131.252:80
59.##9.93.16:80
14#.#.123.110:80
8.##.3.216:80
19#.##1.203.21:80
64.###.110.176:80
14#.#13.9.88:80
19#.##.106.48:80
61.##.11.170:80
20#.##.33.30:8080
20#.###.115.152:8080
20#.##8.219.49:8080
20#.##.45.21:8080
18#.###.250.104:8080
20#.###.116.113:8080
11#.#3.45.21:80
91.##.33.30:80
10#.##3.115.152:80
10#.##8.219.49:80
2.###.116.113:80
42.###.250.104:80
11#.##.235.200:5555
11#.###.193.13:52869
83.###.98.33:52869
88.##.21.238:52869
20#.###.115.152:52869
15#.##.164.250:52869
19#.###.116.113:52869
72.###.116.229:52869
20#.##.76.58:52869
11#.##.198.96:52869
19#.##.2.29:52869
15#.##.37.33:8080
13#.##6.69.101:8080
11#.##.120.127:8080
1.##.#4.208:8080
15#.##.130.52:8080
59.##.193.164:8080
20#.##.68.103:8080
12#.##.53.128:8080
11#.##8.161.75:8080
82.###.74.155:8080
15#.##.37.33:37215
13#.###.69.101:37215
11#.##.120.127:37215
1.##.#4.208:37215
20#.##.68.103:37215
15#.##.37.33:7574
14#.#7.28.37:80
14#.#7.28.37:81
86.##.114.111:49152
86.##.114.111:8443
86.##.114.111:8080
15#.##3.118.59:8080
1.##.84.208:80
15#.#4.37.33:80
11#.##.120.127:80
59.##.193.164:80
20#.##.68.103:80
13#.##6.69.101:80
15#.##.130.52:80
11#.##8.161.75:80
82.###.74.155:80
12#.##.53.128:80
15#.##.37.33:5555
18#.##.202.199:8080
20#.#.89.29:8080
20#.###.122.201:8080
20#.##2.215.86:8080
20#.##.135.202:8080
20#.##9.8.185:8080
78.##.202.199:80
2.##.135.202:80
41.#.89.29:80
18#.##2.215.86:80
84.###.122.201:80
37.##9.8.185:80
60.##.143.126:52869
77.##.163.117:52869
27.##.25.53:52869
13#.###.231.180:52869
12.###.248.133:52869
12#.###.248.101:52869
17#.###.242.232:52869
29.##.183.29:52869
97.###.82.16:52869
12.##.14.14:52869
60.##.143.126:8080
27.##.25.53:8080
13#.###.231.180:8080
12.###.248.133:8080
77.##.163.117:8080
12#.###.248.101:8080
17#.###.242.232:8080
29.##.183.29:8080
97.###.82.16:8080
12.##.14.14:8080
27.##.25.53:37215
60.##.143.126:37215
13#.###.231.180:37215
12.###.248.133:37215
77.##.163.117:37215
12#.###.122.158:7574
12#.##5.122.158:80
12#.##5.122.158:81
77.##.78.245:80
77.##.78.245:49152
77.##.78.245:8443
19#.##6.27.189:8080
77.##.163.117:80
13#.##4.231.180:80
12.###.248.133:80
27.##.25.53:80
60.##.143.126:80
12#.##5.248.101:80
17#.##8.242.232:80
29.##.183.29:80
12.##.14.14:80
97.##8.82.16:80
20#.##.217.24:8080
18#.###.160.134:8080
20#.##0.127.52:8080
20#.##.136.233:8080
20#.###.241.105:8080
20#.##0.71.16:8080
95.##.132.200:80
88.###.213.44:80
21#.##.113.214:80
18#.##.155.157:80
91.##.78.68:80
58.###.110.59:80
12#.###.122.158:5555
18#.##4.10.64:52869
13#.###.213.44:52869
12#.###.87.142:52869
19#.##.30.132:52869
15#.###.214.78:52869
17.###.28.78:52869
41.###.110.59:52869
22#.##.52.150:52869
20#.##6.5.39:52869
19#.##9.214.1:52869

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

DNS ASK:

13##.##idsoldier.fun

Sends data to the following servers:

12#.##6.214.120:23
34.###.205.123:23
80.###.23.189:23
12#.##4.229.35:23
10#.##7.31.137:23
18#.#8.42.12:23
60.##.179.162:23
12#.##.59.243:23
20#.##5.233.210:23
21#.##.184.17:23

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations