Linux.Siggen.3830

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

Network activity:

Awaits incoming connections on ports:

127.0.0.1:63841

Establishes connection:

8.#.8.8:53
18#.##.26.216:8080
20#.##.193.186:8080
18#.##1.226.51:8080
20#.##.186.40:8080
20#.##.10.76:8080
20#.##8.13.171:8080
5.##.26.216:80
1.##.186.40:80
10#.##.193.186:80
88.###.226.51:80
10#.##8.13.171:80
11#.#2.10.76:80
1.##.#5.254:52869
11#.##.235.169:52869
20#.##.215.240:52869
94.##.132.177:52869
11#.#.169.139:52869
94.###.172.198:52869
78.##.53.111:52869
16#.##9.1.81:52869
12#.###.218.95:52869
18#.###.235.173:52869
94.##.132.177:8080
12#.##3.218.95:8080
20#.##.215.240:8080
1.##.#5.254:8080
16#.##9.1.81:8080
11#.##.235.169:8080
78.##.53.111:8080
11#.#.169.139:8080
18#.###.235.173:8080
94.###.172.198:8080
20#.##.215.240:37215
12#.###.218.95:37215
1.##.#5.254:37215
11#.##.235.169:37215
94.##.132.177:37215
11#.###.124.230:7574
11#.##4.124.230:80
11#.##4.124.230:81
10#.##.171.220:80
10#.##.171.220:49152
10#.##.171.220:8443
10#.##.171.220:8080
51.###.199.182:8080
94.##.132.177:80
12#.##3.218.95:80
1.##.15.254:80
20#.##.215.240:80
11#.##.235.169:80
18#.##3.235.173:80
16#.#89.1.81:80
78.##.53.111:80
11#.#.169.139:80
94.###.172.198:80
18#.#.238.245:8080
20#.##.200.122:8080
18#.###.103.214:8080
20#.###.141.117:8080
20#.##.157.215:8080
20#.##2.198.28:8080
14#.##.200.122:80
95.##.157.215:80
11#.##0.141.117:80
42.###.103.214:80
18#.#.238.245:80
18#.##2.198.28:80
11#.###.124.230:5555
14#.###.253.165:52869
37.###.66.118:52869
21#.###.121.31:52869
37.##.162.55:52869
78.##.75.0:52869
13#.##.220.62:52869
13#.##.10.142:52869
18#.##9.84.28:52869
36.##.146.143:52869
12#.##.53.127:52869
78.##.75.0:8080
36.##.146.143:8080
37.##.162.55:8080
21#.##1.121.31:8080
37.###.66.118:8080
14#.###.253.165:8080
18#.##9.84.28:8080
13#.##.220.62:8080
12#.##.53.127:8080
13#.##.10.142:8080
14#.###.253.165:37215
13#.##.220.62:37215
13#.##.10.142:37215
37.###.66.118:37215
21#.###.121.31:37215
56.##.135.192:7574
56.##.135.192:80
56.##.135.192:81
13#.##0.224.225:80
13#.###.224.225:49152
13#.###.224.225:8443
50.###.179.94:8080
21#.##1.121.31:80
13#.##.220.62:80
37.###.66.118:80
14#.##8.253.165:80
18#.##9.84.28:80
37.##.162.55:80
12#.##.53.127:80
13#.##.10.142:80
78.##.75.0:80
36.##.146.143:80
20#.##9.14.14:8080
18#.##1.107.85:8080
18#.##9.91.10:8080
20#.###.164.216:8080
20#.##.5.44:8080
20#.##.126.173:8080
2.###.6.89:80
62.###.246.61:80
18#.#4.57.68:80
41.##.203.88:80
31.##.117.248:80
37.###.160.14:80
56.##.135.192:5555
21#.###.246.61:52869
19#.##.235.79:52869
42.###.248.224:52869
55.###.102.160:52869
19#.##.86.20:52869
16#.##.57.68:52869
11#.##.83.203:52869
5.##.#01.173:52869
35.###.162.226:52869
18#.###.226.169:52869
55.###.102.160:8080
19#.##.235.79:8080
16#.##.57.68:8080
11#.##.83.203:8080
21#.##9.246.61:8080
19#.##.86.20:8080
42.###.248.224:8080
18#.###.226.169:8080
35.###.162.226:8080
5.##.#01.173:8080
19#.##.236.195:37215
24.##.233.73:37215
70.###.182.5:37215
16#.###.234.100:37215
52.###.181.156:37215
16#.###.234.100:7574
16#.##3.234.100:80
19#.##9.50.62:81
19#.##9.50.62:80
19#.##9.50.62:49152
19#.##9.50.62:8443
12#.##.21.72:8080
19#.##.235.79:80
55.###.102.160:80
16#.#4.57.68:80
19#.#1.86.20:80
42.###.248.224:80
18#.##3.226.169:80
11#.##.83.203:80
21#.##9.246.61:80
35.###.162.226:80
5.##.201.173:80
18#.##2.199.84:8080
20#.###.221.244:8080
18#.##2.192.40:8080
18#.###.112.127:8080
20#.##9.65.94:8080
20#.##9.106.94:8080
21#.##0.156.116:80
89.##.216.32:80
18#.##.225.188:80
91.##.237.0:80
91.##.32.177:80
18#.##.210.155:80
16#.###.234.100:5555
65.##.14.210:52869
79.##.35.61:52869
12#.##.237.0:52869
15#.###.188.10:52869
75.###.156.116:52869
33.###.92.61:52869
11#.###.249.15:52869
52.#.#7.190:52869
18#.##.65.32:52869
33.###.248.80:52869
65.##.14.210:8080
33.###.92.61:8080
75.###.156.116:8080
12#.##.237.0:8080
15#.##5.188.10:8080
33.###.248.80:8080
79.##.35.61:8080
11#.##7.249.15:8080
18#.##.65.32:8080
52.#.#7.190:8080
11#.##.160.23:37215
89.###.75.236:37215
22#.###.60.208:37215
13#.##.204.119:37215
16#.##.138.159:37215
16#.##.138.159:7574
16#.##.138.159:80
22#.##5.213.95:81
22#.##5.213.95:80
22#.###.213.95:49152
34.###.111.238:8443
34.###.111.238:8080
65.##.14.210:80
33.##2.92.61:80
75.###.156.116:80
12#.#0.237.0:80
15#.##5.188.10:80
79.##.35.61:80
11#.##7.249.15:80
33.###.248.80:80
18#.#2.65.32:80
52.#.97.190:80
18#.##8.131.62:8080
18#.###.127.233:8080
18#.#.138.14:8080
20#.##2.185.99:8080
20#.##.196.223:8080
18#.##.201.90:8080
21#.##8.131.62:80
58.##.196.223:80
18#.#.138.14:80
58.###.127.233:80
92.###.185.99:80
31.##.201.90:80
16#.##.138.159:5555
14.##.8.138:52869
63.##.105.140:52869
97.###.99.232:52869
5.##.#01.90:52869
17#.###.223.128:52869
15#.###.114.141:52869
23.#.#9.60:52869
4.###.201.89:52869
13#.##.242.185:52869
98.###.127.233:52869
22#.##5.56.102:8080
98.##.8.40:8080
22#.#.208.218:8080
11#.###.216.146:8080
83.###.169.9:8080
15#.##.187.40:8080
22#.##5.80.84:8080
53.###.237.88:8080
14#.##0.4.2:8080
22#.##5.56.102:80
29.###.93.197:8080
22#.###.56.102:37215
98.##.8.40:37215
22#.##5.80.84:37215
22#.#.208.218:37215
14#.##0.4.2:37215
22#.##5.80.84:7574
23.##.46.184:80
23.##.46.184:81
23.##.46.184:49152
22#.##.130.145:8443
22#.##.130.145:8080
98.##.8.40:80
83.##6.169.9:80
22#.##5.80.84:80
11#.##9.216.146:80
53.###.237.88:80
29.###.93.197:80
15#.##.187.40:80
20#.##1.50.91:8080
22#.#.208.218:80
14#.#50.4.2:80
20#.##.225.74:8080
20#.##9.137.53:8080
20#.##.45.12:8080
18#.##3.2.218:8080
18#.##.24.219:8080
58.##3.2.218:80
1.###.50.91:80
11#.##9.137.53:80
14#.##.24.219:80
41.##.225.74:80
37.##.45.12:80
22#.##5.80.84:5555
10#.##.225.74:52869
72.###.181.50:52869
10#.##.24.219:52869
50.##.163.2:52869
20.##.12.199:52869
17#.##7.67.98:52869
22#.##.109.159:52869
31.##.154.230:52869
15#.###.201.212:52869
30.###.134.180:52869
12#.###.127.102:8080
14#.##.64.75:8080
37.###.81.26:8080
16#.##7.141.74:8080
16#.###.162.155:8080
1.###.1.172:8080
59.##.212.176:8080
89.##.112.10:8080
17#.##8.44.15:8080
12#.##.164.17:8080
12#.##6.127.102:80
12#.###.127.102:37215
89.##.112.10:37215
1.###.1.172:37215
59.##.212.176:37215
16#.###.162.155:37215
89.##.112.10:7574
99.##.153.66:80
99.##.153.66:81
90.###.16.128:49152
90.###.16.128:8443
90.###.16.128:8080
31.##.205.35:8080
21#.##.184.17:23
16#.##3.162.155:80
17#.##8.44.15:80
12#.##.164.17:80
1.###.1.172:80
59.##.212.176:80
89.##.112.10:80
14#.#9.64.75:80
37.##8.81.26:80
16#.##7.141.74:80
18#.#.111.140:8080
18#.##1.67.16:8080
18#.##.170.242:8080
20#.##.9.66:8080
20#.##7.212.7:8080
20#.##8.152.74:8080
17#.##1.67.16:80
89.##7.212.7:80
21#.##8.152.74:80
84.#.111.140:80
2.##.170.242:80
62.##.9.66:80
89.##.112.10:5555
17#.##.16.64:52869
61.###.212.7:52869
7.###.1.111:52869
18#.##.9.66:52869
17#.###.158.152:52869
31.##.205.35:52869
16#.###.113.162:52869
91.###.21.66:52869
13#.###.228.209:52869
19#.###.65.126:52869
90.###.243.32:8080
15#.##.161.81:8080
17#.###.115.200:8080
17#.##2.7.195:8080
46.###.45.24:8080
38.##.28.88:8080
20#.##5.30.135:8080
13#.##2.116.70:8080
68.###.215.195:8080
59.###.207.150:8080
90.###.243.32:37215
68.###.215.195:37215
13#.###.116.70:37215
17#.###.115.200:37215
15#.##.161.81:37215
17#.##3.172.66:7574
17#.##3.172.66:80
17#.##3.172.66:81
11#.###.116.35:49152
11#.##3.116.35:8443
11#.##3.116.35:8080
12#.##.210.124:8080
68.###.215.195:80
59.###.207.150:80
15#.##.161.81:80
17#.##2.7.195:80
38.##.28.88:80
20#.##5.30.135:80
90.###.243.32:80
13#.##2.116.70:80
46.##9.45.24:80
17#.##2.115.200:80
20#.##5.155.85:8080
18#.##1.96.160:8080
20#.##2.89.226:8080
18#.##0.22.56:8080
20#.##8.99.175:8080
18#.##4.37.188:8080
19#.##5.155.85:80
11#.##1.96.160:80
11#.##8.99.175:80
11#.##2.89.226:80
10#.##0.22.56:80
92.###.37.188:80
17#.##3.172.66:5555
59.###.88.40:52869
14#.##.10.29:52869
12#.##.72.116:52869
15#.##.238.159:52869
20#.###.185.216:52869
18#.##.41.131:52869
20#.###.35.252:52869
16#.##.156.244:52869
19#.###.233.43:52869
13#.##.134.193:52869
14#.##.10.29:8080
15#.##.238.159:8080
12#.##.72.116:8080
18#.##.41.131:8080
20#.##4.35.252:8080
16#.##.156.244:8080
13#.##.134.193:8080
20#.###.185.216:8080
59.###.88.40:8080
19#.##0.233.43:8080
14#.##.10.29:37215
59.###.88.40:37215
12#.##.72.116:37215
15#.##.238.159:37215
20#.###.185.216:37215
28.##.215.100:7574
28.##.215.100:80
28.##.215.100:81
15.###.186.144:80
15.###.186.144:49152
15.###.186.144:8443
15.###.186.144:8080
15#.###.139.241:8080
20#.##4.35.252:80
16#.##.156.244:80
20#.##4.185.216:80
19#.##0.233.43:80
14#.#1.10.29:80
15#.##.238.159:80
18#.##.41.131:80
13#.##.134.193:80
59.##7.88.40:80
12#.##.72.116:80
20#.##.223.121:8080
18#.##.83.39:8080
20#.###.239.145:8080
18#.##.220.168:8080
20#.##.56.159:8080
20#.##5.54.180:8080
11#.#3.83.39:80
11#.##8.239.145:80
62.##.220.168:80
92.##.56.159:80
89.###.54.180:80
62.##.223.121:80
28.##.215.100:5555
18#.##4.61.2:52869
50.###.144.173:52869
14#.###.102.185:52869
20#.###.202.123:52869
21#.##1.90.73:52869
18#.###.118.152:52869
35.##.156.109:52869
13#.###.132.136:52869
7.###.121.13:52869
20#.###.133.78:52869
50.###.144.173:8080
20#.##1.133.78:8080
35.##.156.109:8080
13#.###.132.136:8080
7.###.121.13:8080
18#.##4.61.2:8080
18#.###.118.152:8080
14#.###.102.185:8080
21#.##1.90.73:8080
20#.###.202.123:8080
50.###.144.173:37215
18#.##4.61.2:37215
20#.###.133.78:37215
13#.###.132.136:37215
7.###.121.13:37215
13#.##.126.57:7574
13#.##.126.57:80
13#.##.126.57:81
53.###.161.242:80
53.###.161.242:49152
53.###.161.242:8443
17#.##9.59.57:8080
50.###.144.173:80
7.###.121.13:80
13#.##0.132.136:80
21#.##1.90.73:80
35.##.156.109:80
18#.#54.61.2:80
20#.##1.133.78:80
18#.##5.118.152:80
14#.##1.102.185:80
20#.##0.202.123:80
18#.##.131.127:8080
20#.##2.62.85:8080
20#.###.190.140:8080
20#.##.38.199:8080
18#.###.102.116:8080
20#.###.108.153:8080
14#.##.152.112:80
95.###.201.111:80
11#.##8.193.207:80
18#.##8.252.32:80
18#.##1.150.89:80
89.###.84.167:80
13#.##.126.57:5555
53.###.201.111:52869
43.###.112.105:52869
10#.###.252.32:52869
58.###.156.254:52869
18#.###.130.74:52869
12#.###.208.193:52869
12#.##.111.150:52869
21#.##.157.49:52869
15#.##.15.215:52869
11#.##.48.120:52869
10#.##8.252.32:8080
53.###.201.111:8080
12#.###.208.193:8080
58.###.156.254:8080
21#.##.157.49:8080
12#.##.111.150:8080
43.###.112.105:8080
18#.##7.130.74:8080
15#.##.15.215:8080
11#.##.48.120:8080
12#.##.111.150:80
18#.###.48.144:37215
21#.##.114.103:37215
14#.#.5.191:37215
18#.##8.61.68:37215
88.##.36.155:37215
21#.##.114.103:7574
21#.##.114.103:80
13#.##.18.135:81
13#.##.18.135:80
13#.##.18.135:49152
13#.##.18.135:8443
20#.###.149.240:8080
10#.##8.252.32:80
12#.##7.208.193:80
58.###.156.254:80
21#.##.157.49:80
53.###.201.111:80
43.###.112.105:80
18#.##7.130.74:80
15#.##.15.215:80
11#.##.48.120:80
21#.##.114.103:5555
18#.##.161.210:8080
20#.##.162.164:8080
18#.###.160.230:8080
20#.###.226.112:8080
18#.##5.108.48:8080
18#.##9.39.26:8080
84.###.164.185:80
21#.##3.208.47:80
31.###.64.150:80
14#.##3.81.187:80
95.##.180.31:80
21#.##2.201.132:80
19#.###.193.208:52869
17#.###.232.201:52869
11.###.64.150:52869
12#.##.224.24:52869
10#.##.45.223:52869
23#.###.81.187:52869
62.###.31.242:52869
15#.###.219.172:52869
15#.##.68.120:52869
19#.##3.73.77:52869
62.###.31.242:8080
19#.###.193.208:8080
23#.##3.81.187:8080
17#.###.232.201:8080
12#.##.224.24:8080
10#.##.45.223:8080
19#.##3.73.77:8080
23#.##3.81.187:80
15#.###.219.172:8080
11.###.64.150:8080
15#.##.68.120:8080
28.##.87.118:37215
14#.##.234.250:37215
99.###.199.47:37215
16.##.164.252:37215
19#.##.219.68:37215
28.##.87.118:7574
28.##.87.118:80
33.##.233.224:81
33.##.233.224:80
33.##.233.224:49152
56.##.92.60:8443
56.##.92.60:8080
62.###.31.242:80
19#.##5.193.208:80
17#.##5.232.201:80
19#.##3.73.77:80
15#.##4.219.172:80
11.###.64.150:80
12#.##.224.24:80
10#.##.45.223:80
15#.##.68.120:80
18#.###.126.159:8080
18#.##.17.122:8080
20#.###.179.119:8080
18#.##.181.214:8080
20#.##.133.95:8080
20#.##3.16.194:8080
37.###.58.201:80
5.###.30.105:80
82.##9.92.63:80
62.###.226.62:80
89.###.241.46:80
84.##5.47.35:80
28.##.87.118:5555
98.###.226.62:52869
11#.##.170.241:52869
51.###.137.58:52869
10#.##.111.180:52869
23#.###.166.96:52869
21#.##.46.111:52869
75.###.47.35:52869
18#.##.163.16:52869
13#.###.130.171:52869
22#.##.63.182:52869
15#.###.153.148:8080
18.##.221.194:8080
66.##.191.180:8080
11#.##.186.164:8080
22#.##8.18.88:8080
16#.##5.28.211:8080
58.###.237.130:8080
19#.###.182.164:8080
22#.##8.18.88:80
72.##.220.47:8080
10#.###.247.223:8080
18.##.221.194:37215
22#.##8.18.88:37215
16#.###.28.211:37215
66.##.191.180:37215
11#.##.186.164:37215
66.##.191.180:7574
18#.##.18.232:80

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

DNS ASK:

13##.##idsoldier.fun

Sends data to the following servers:

41.##.145.124:23
21#.##1.81.51:23
13#.##.104.52:23
11#.##8.212.156:23
17#.##.182.209:23
18#.##5.109.253:23
11#.##8.174.188:23
22#.##0.122.221:23
11#.##.160.58:23
21#.##.184.17:23

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations