Linux.Siggen.3833

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

Network activity:

Awaits incoming connections on ports:

127.0.0.1:63841

Establishes connection:

8.#.8.8:53
20#.##.32.187:8080
20#.##2.85.183:8080
20#.##.167.16:8080
20#.###.235.215:8080
20#.##.241.178:8080
20#.###.208.221:8080
95.##.241.178:80
88.##.167.16:80
95.###.85.183:80
91.###.235.215:80
82.##.32.187:80
84.###.208.221:80
0.###.138.127:52869
18#.###.220.248:52869
14#.#.135.187:52869
21#.###.120.106:52869
15#.#.254.234:52869
15.#.#2.15:52869
16#.##.56.226:52869
23#.###.220.65:52869
18#.##1.43.14:52869
20#.###.192.182:52869
0.###.138.127:8080
21#.###.120.106:8080
18#.###.220.248:8080
14#.#.135.187:8080
15.#.42.15:8080
15#.#.254.234:8080
0.###.138.127:80
18#.##1.43.14:8080
16#.##.56.226:8080
23#.##8.220.65:8080
23#.##8.220.65:80
20#.###.192.182:8080
18#.###.220.248:37215
14#.#.135.187:37215
21#.###.120.106:37215
0.###.138.127:37215
15#.#.254.234:37215
10#.##1.49.225:7574
10#.##1.49.225:80
10#.##1.49.225:81
20.##.8.124:80
20.##.8.124:49152
20.##.8.124:8443
14#.##.199.167:8080
21#.##1.120.106:80
18#.##7.220.248:80
14#.#.135.187:80
15.#.42.15:80
16#.##.56.226:80
18#.##1.43.14:80
15#.#.254.234:80
20#.##0.192.182:80
20#.##3.245.4:8080
20#.##7.50.53:8080
20#.##9.139.90:8080
20#.##.113.184:8080
20#.##3.157.29:8080
20#.###.119.111:8080
2.###.119.111:80
88.##3.245.4:80
95.##.113.184:80
5.###.157.29:80
18#.##7.50.53:80
11#.##9.139.90:80
10#.##1.49.225:5555
67.###.239.123:52869
70.##.160.210:52869
21#.###.243.91:52869
89.##.237.150:52869
17#.###.42.127:52869
16#.###.59.203:52869
47.##.7.253:52869
18#.###.249.220:52869
21#.###.175.12:52869
29.###.141.78:52869
67.###.239.123:8080
21#.##6.243.91:8080
16#.##3.59.203:8080
70.##.160.210:8080
89.##.237.150:8080
29.###.141.78:8080
21#.##4.175.12:8080
17#.##8.42.127:8080
18#.###.249.220:8080
47.##.7.253:8080
73.###.194.25:37215
22#.##.44.32:37215
75.##.181.234:37215
19#.###.149.146:37215
66.##.158.248:37215
22#.##.44.32:7574
22#.##.44.32:5555
22#.#4.44.32:80
22#.#4.44.32:81
19#.##2.77.224:80
19#.###.77.224:49152
19#.##2.77.224:8443
22#.###.212.190:8080
67.###.239.123:80
21#.##6.243.91:80
70.##.160.210:80
89.##.237.150:80
16#.##3.59.203:80
47.##.7.253:80
18#.##2.249.220:80
29.###.141.78:80
17#.##8.42.127:80
21#.##4.175.12:80
20#.###.104.108:8080
20#.###.147.210:8080
18#.##.231.157:8080
18#.###.203.172:8080
18#.##.204.50:8080
20#.##7.66.37:8080
21#.##0.231.199:80
14#.##.121.74:80
21#.##4.152.111:80
82.##.94.54:80
82.###.10.180:80
5.###.220.151:80
58.###.193.10:52869
7.###.74.29:52869
22.##.120.231:52869
15#.###.17.189:52869
16#.###.152.111:52869
57.###.220.151:52869
20#.###.149.108:52869
11#.###.27.133:52869
6.##.#95.181:52869
20.###.64.56:52869
58.###.193.10:8080
16#.###.152.111:8080
15#.##5.17.189:8080
7.###.74.29:8080
57.###.220.151:8080
11#.##7.27.133:8080
22.##.120.231:8080
6.##.#95.181:8080
20#.###.149.108:8080
20.###.64.56:8080
19#.###.12.245:37215
11#.###.61.193:37215
14#.##.24.49:37215
15.###.109.215:37215
10#.##.163.203:37215
15.###.109.215:7574
15.###.109.215:80
18#.##4.241.190:81
18#.##4.241.190:80
18#.###.241.190:49152
69.##.99.82:8443
69.##.99.82:8080
15#.##5.17.189:80
7.###.74.29:80
57.###.220.151:80
58.###.193.10:80
16#.##4.152.111:80
22.##.120.231:80
20.##3.64.56:80
20#.##4.149.108:80
6.##.195.181:80
11#.##7.27.133:80
20#.##.53.176:8080
20#.###.233.228:8080
18#.##7.98.28:8080
20#.###.178.164:8080
20#.##.123.116:8080
20#.#.174.189:8080
11#.##.202.220:80
14#.##2.10.135:80
18#.##2.73.42:80
78.###.65.252:80
78.###.87.164:80
10#.##.204.20:80
15.###.109.215:5555
22#.###.10.135:52869
17#.##.164.83:52869
76.##.204.20:52869
84.##.102.65:52869
18#.###.160.69:52869
23.###.182.73:52869
22#.##.126.155:52869
12#.##.169.88:52869
11#.###.24.100:52869
73.##.153.13:52869
18#.##3.160.69:8080
84.##.102.65:8080
22#.##2.10.135:8080
17#.##.164.83:8080
23.###.182.73:8080
76.##.204.20:8080
22#.##.126.155:8080
12#.##.169.88:8080
11#.##2.24.100:8080
73.##.153.13:8080
98.##.145.7:37215
80.#.#54.189:37215
14#.##.179.206:37215
22#.##.197.235:37215
12#.##.206.156:37215
22#.##.197.235:7574
22#.##.197.235:5555
22#.##.197.235:80
18#.##2.0.116:81
18#.##2.0.116:80
18#.##2.0.116:49152
16#.##.47.176:8443
16#.##.47.176:8080
22#.##2.10.135:80
17#.##.164.83:80
18#.##3.160.69:80
84.##.102.65:80
23.###.182.73:80
76.##.204.20:80
22#.##.126.155:80
12#.##.169.88:80
11#.##2.24.100:80
73.##.153.13:80
18#.##.125.217:8080
20#.##3.44.42:8080
18#.###.154.167:8080
20#.##8.32.99:8080
20#.##.31.234:8080
20#.###.122.137:8080
37.##8.32.99:80
5.##.125.217:80
18#.##3.122.137:80
21#.##3.154.167:80
88.##3.44.42:80
5.##.31.234:80
20#.##8.32.99:52869
76.##.193.122:52869
13#.##.220.82:52869
13#.###.217.243:52869
19.##.243.154:52869
13#.##.31.234:52869
15#.##.162.45:52869
21#.##1.54.40:52869
41.###.204.32:52869
14#.###.254.210:52869
18#.##.178.218:8080
96.###.185.104:8080
13#.##0.54.103:8080
21#.##.20.130:8080
48.###.137.19:8080
98.###.226.72:8080
20#.##.95.231:8080
34.###.34.230:8080
15#.###.234.229:8080
12#.##7.64.72:8080
13#.###.54.103:37215
18#.##.178.218:37215
21#.##.20.130:37215
96.###.185.104:37215
98.###.226.72:37215
21#.##.20.130:7574
18#.##.105.222:80
18#.##.105.222:81
23#.##8.17.92:49152
23#.##8.17.92:8443
23#.##8.17.92:8080
18#.##.178.218:80
96.###.185.104:80
21#.##.20.130:80
98.###.226.72:80
20#.##.95.231:80
13#.##0.54.103:80
48.###.137.19:80
15#.##2.234.229:80
34.###.34.230:80
12#.##7.64.72:80
20#.###.239.206:8080
18#.##6.222.68:8080
20#.##0.11.74:8080
18#.##7.247.50:8080
18#.###.189.105:8080
20#.###.253.153:8080
91.###.239.206:80
21#.##7.247.50:80
84.##0.11.74:80
31.###.253.153:80
11#.##6.222.68:80
21#.##2.189.105:80
21#.##.20.130:5555
19#.##.176.222:52869
94.###.31.57:52869
13#.##.238.253:52869
13#.###.239.206:52869
99.###.189.105:52869
19#.###.50.200:52869
22#.##.117.125:52869
59.###.132.212:52869
17#.###.209.140:52869
64.###.15.242:52869
12#.###.138.224:8080
19#.##8.220.41:8080
22#.##6.23.96:8080
12#.##9.197.38:8080
88.###.115.163:8080
22#.##.210.208:8080
10#.##9.16.99:8080
42.###.187.212:8080
20#.##.53.110:8080
22#.##.210.208:80
52.##.79.254:8080
22#.##6.23.96:37215
19#.###.220.41:37215
12#.###.138.224:37215
12#.###.197.38:37215
88.###.115.163:37215
14#.##.199.169:7574
14#.##.199.169:80
14#.##.199.169:81
16#.##4.6.138:80
16#.##4.6.138:49152
16#.##4.6.138:8443
16#.##4.6.138:8080
21#.##.184.17:23
23#.#.38.21:8080
12#.##0.138.224:80
12#.##9.197.38:80
19#.##8.220.41:80
88.###.115.163:80
22#.##6.23.96:80
10#.##9.16.99:80
42.###.187.212:80
20#.##.53.110:80
52.##.79.254:80
20#.##1.76.51:8080
18#.##5.40.178:8080
20#.#.20.184:8080
18#.##.181.213:8080
18#.##.151.78:8080
18#.##6.42.2:8080
88.##1.76.51:80
21#.##5.40.178:80
58.##.181.213:80
42.#.20.184:80
42.##6.42.2:80
11#.##.151.78:80
14#.##.199.169:5555
22#.##6.52.72:52869
12#.##0.13.40:52869
93.###.234.191:52869
10#.###.87.124:52869
22.###.214.84:52869
11#.###.31.199:52869
65.###.36.120:52869
21#.##.160.89:52869
18#.###.99.208:52869
18#.##.162.36:52869
22#.##6.52.72:8080
12#.##0.13.40:8080
22.###.214.84:8080
93.###.234.191:8080
10#.##7.87.124:8080
11#.##7.31.199:8080
18#.##7.99.208:8080
65.###.36.120:8080
18#.##.162.36:8080
21#.##.160.89:8080
10#.##.160.12:37215
51.###.245.231:37215
10#.###.244.141:37215
22#.##8.176.9:37215
17.##.7.219:37215
51.###.245.231:7574
51.###.245.231:80
51.###.245.231:81
65.###.197.58:80
65.###.197.58:49152
65.###.197.58:8443
17.##.81.160:8080
22#.##6.52.72:80
93.###.234.191:80
12#.##0.13.40:80
10#.##7.87.124:80
11#.##7.31.199:80
22.###.214.84:80
18#.##7.99.208:80
65.###.36.120:80
18#.##.162.36:80
21#.##.160.89:80
18#.##.106.201:8080
18#.##.76.165:8080
18#.##.72.126:8080
18#.##0.163.5:8080
18#.##.238.8:8080
18#.##.126.61:8080
82.###.29.238:80
1.###.223.53:80
11#.##9.185.243:80
1.###.138.52:80
17#.##.202.251:80
1.#.#9.147:80
51.###.245.231:5555
15#.###.239.185:52869
14#.###.138.138:52869
16#.###.202.223:52869
10#.###.223.53:52869
22#.##.238.37:52869
90.###.57.12:52869
58.###.5.117:52869
28.#.#9.147:52869
12#.###.93.156:52869
32.##.85.36:52869
15#.###.239.185:8080
22#.##.238.37:8080
10#.##2.223.53:8080
16#.###.202.223:8080
14#.###.138.138:8080
28.#.#9.147:8080
22#.##.238.37:80
90.###.57.12:8080
58.###.5.117:8080
32.##.85.36:8080
12#.##6.93.156:8080
76.###.164.84:37215
22#.##.72.68:37215
45.###.138.223:37215
20#.##.4.118:37215
43.##.146.66:37215
43.##.146.66:7574
43.##.146.66:80
5.###.223.49:81
5.###.223.49:80
5.###.223.49:49152
23#.##0.141.67:8443
23#.##0.141.67:8080
15#.##6.239.185:80
10#.##2.223.53:80
16#.##5.202.223:80
14#.##1.138.138:80
28.#.19.147:80
58.##5.5.117:80
90.##4.57.12:80
32.##.85.36:80
18#.#.21.175:8080
20#.##.224.141:8080
12#.##6.93.156:80
20#.##9.47.143:8080
18#.##.141.18:8080
20#.##6.18.172:8080
18#.##1.182.43:8080
31.###.197.222:80
42.##.32.107:80
82.##.107.113:80
11#.##9.33.29:80
14#.##.132.90:80
1.##.185.30:80
43.##.146.66:5555
44.##.107.113:52869
22#.###.222.149:52869
11#.##4.26.32:52869
22#.###.230.135:52869
22#.##.185.30:52869
17#.##.72.132:52869
52.###.88.171:52869
12#.###.52.190:52869
2.##.3.55:52869
30.##.95.218:52869
44.##.107.113:8080
11#.##4.26.32:8080
22#.###.222.149:8080
22#.###.230.135:8080
17#.##.72.132:8080
52.###.88.171:8080
30.##.95.218:8080
22#.##.185.30:8080
22#.##.185.30:80
2.##.3.55:8080
22#.##0.230.135:80
22#.##7.222.149:80
12#.##1.52.190:8080
12#.##1.52.190:80
76.###.185.116:37215
19#.###.161.55:37215
10#.###.102.204:37215
20#.##.226.175:37215
17#.##.197.251:37215
76.###.185.116:7574
76.###.185.116:80
12#.##2.195.119:81
12#.##2.195.119:80
12#.###.195.119:49152
16#.##.242.193:8443
16#.##.242.193:8080
44.##.107.113:80
11#.##4.26.32:80
17#.##.72.132:80
30.##.95.218:80
2.##.3.55:80
52.###.88.171:80
20#.##.172.235:8080
18#.##.215.230:8080
20#.##0.95.243:8080
20#.##.108.236:8080
18#.##.76.116:8080
18#.##.252.88:8080
11#.##.215.230:80
14#.##.172.235:80
5.###.95.243:80
18#.##.108.236:80
42.##.76.116:80
2.##.252.88:80
76.###.185.116:5555
18.##.172.235:52869
15#.###.230.92:52869
45.###.28.108:52869
17#.##3.145.6:52869
10#.##.252.88:52869
13#.###.130.95:52869
21#.###.233.242:52869
97.###.245.166:52869
22#.##.37.227:52869
26.#.#72.184:52869
15#.##8.107.36:8080
18#.##.157.126:8080
20#.##2.23.125:8080
18#.##.119.161:8080
11#.##.121.0:8080
72.##.99.66:8080
69.##.171.116:8080
11#.###.143.227:8080
15#.##0.67.4:8080
35.###.40.89:8080
15#.###.107.36:37215
20#.###.23.125:37215
72.##.99.66:37215
18#.##.157.126:37215
69.##.171.116:37215
72.##.99.66:7574
14#.#.240.68:80
14#.#.240.68:81
61.#.#38.253:49152
61.#.#38.253:8443
61.#.#38.253:8080
20#.##2.23.125:80
18#.##.119.161:80
15#.##8.107.36:80
72.##.99.66:80
18#.##.157.126:80
11#.##4.143.227:80
11#.#9.121.0:80
15#.#20.67.4:80
35.##4.40.89:80
69.##.171.116:80
72.##.99.66:5555
20#.###.184.203:8080
20#.#.226.70:8080
18#.##.48.71:8080
20#.##1.22.54:8080
18#.###.217.139:8080
20#.###.181.153:8080
11#.##0.181.153:80
19#.#.226.70:80
78.##.48.71:80
84.###.184.203:80
19#.##8.217.139:80
95.##1.22.54:80
9.###.184.203:52869
20#.##4.0.226:52869
15.###.16.181:52869
86.##.71.228:52869
37.###.161.22:52869
12#.###.181.153:52869
76.##.217.211:52869
6.##.#6.101:52869
16#.##.145.152:52869
21#.##.27.47:52869
27.###.199.18:8080
70.###.131.28:8080
77.###.60.141:8080
22#.##4.34.118:8080
36.###.96.12:8080
13#.##0.48.55:8080
22#.##4.34.118:80
29.##.254.133:8080
22#.##0.74.78:8080
12#.##5.196.13:8080
60.###.41.1:8080
27.###.199.18:37215
70.###.131.28:37215
22#.###.34.118:37215
36.###.96.12:37215
77.###.60.141:37215
22#.##5.150.38:7574
22#.##5.150.38:5555
22#.##5.150.38:80
22#.##5.150.38:81
11.##.246.19:49152
11.##.246.19:8443
11.##.246.19:8080
50.###.149.63:8080
27.###.199.18:80
70.###.131.28:80
36.##7.96.12:80
77.###.60.141:80
29.##.254.133:80
13#.##0.48.55:80
22#.##0.74.78:80
12#.##5.196.13:80
60.##9.41.1:80
20#.##1.181.29:8080
20#.##7.30.249:8080
18#.##1.60.167:8080
18#.###.243.212:8080
18#.##3.94.161:8080
20#.##7.51.188:8080
10#.##7.30.249:80
10#.##1.181.29:80
37.###.243.212:80
2.###.51.188:80
17#.##3.94.161:80
41.###.60.167:80
70.##.83.169:52869
23#.##5.13.30:52869
22#.##.124.168:52869
20#.##0.66.10:52869
21#.##.253.207:52869
64.###.30.36:52869
24.###.244.170:52869
20#.###.61.116:52869
18#.###.83.230:52869
20#.##.144.183:52869
70.##.83.169:8080
22#.##.124.168:8080
23#.##5.13.30:8080
64.###.30.36:8080
20#.##7.61.116:8080
24.###.244.170:8080
21#.##.253.207:8080
18#.##3.83.230:8080
20#.##.144.183:8080
20#.##0.66.10:8080
23#.##5.13.30:80
23#.##5.13.30:37215
21#.##.253.207:37215
64.###.30.36:37215
70.##.83.169:37215
22#.##.124.168:37215
22#.##7.139.81:7574
22#.##7.139.81:5555
22#.##7.139.81:80

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

DNS ASK:

13##.##idsoldier.fun

Sends data to the following servers:

13.##.71.48:23
19#.##2.33.62:23
87.##.156.243:23
21#.##3.239.10:23
44.###.153.97:23
11#.##1.149.191:23
91.###.60.250:23
20#.##1.203.174:23
73.###.113.195:23
21#.##.184.17:23

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations