Linux.Siggen.3832

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

Network activity:

Awaits incoming connections on ports:

127.0.0.1:63841

Establishes connection:

8.#.8.8:53
20#.##2.49.12:8080
20#.##.1.136:8080
20#.##7.160.86:8080
20#.##1.237.77:8080
20#.##.20.96:8080
18#.##.114.64:8080
41.###.79.226:80
2.##.227.214:80
21#.##1.62.118:80
89.##.229.24:80
84.##.107.239:80
17#.##3.185.70:80
1.##.#8.227:52869
11#.##3.222.8:52869
20.###.239.118:52869
48.###.62.118:52869
99.###.18.251:52869
65.###.185.70:52869
16#.###.23.229:52869
31.###.57.85:52869
22#.###.220.17:52869
11.###.116.1:52869
11#.##3.222.8:8080
20.###.239.118:8080
48.###.62.118:8080
99.###.18.251:8080
16#.##6.23.229:8080
1.##.#8.227:8080
22#.##1.220.17:8080
11.###.116.1:8080
65.###.185.70:8080
31.###.57.85:8080
22#.##1.220.17:80
14#.##.213.135:37215
44.##.82.0:37215
19#.###.175.242:37215
16#.##3.45.29:37215
56.##.178.235:37215
16#.##3.45.29:7574
16#.##3.45.29:80
15#.##3.57.142:81
15#.##3.57.142:80
15#.###.57.142:49152
42.###.230.229:8443
42.###.230.229:8080
11#.##3.222.8:80
48.###.62.118:80
99.###.18.251:80
16#.##6.23.229:80
1.##.18.227:80
20.###.239.118:80
65.###.185.70:80
31.##6.57.85:80
11.##9.116.1:80
18#.###.231.209:8080
18#.###.131.120:8080
20#.##0.89.73:8080
20#.##3.245.47:8080
20#.###.208.143:8080
18#.##.189.185:8080
37.##.148.211:80
82.###.245.230:80
18#.##5.114.46:80
17#.##5.235.86:80
14#.##.253.135:80
21#.##.178.178:80
16#.##3.45.29:5555
13#.##.148.211:52869
15#.##.235.235:52869
15#.##8.34.71:52869
56.##.178.178:52869
3.###.135.235:52869
21#.#.24.148:52869
22#.##.109.245:52869
15#.##.168.242:52869
30.###.105.172:52869
21#.##.92.188:52869
15#.##.235.235:8080
15#.##8.34.71:8080
3.###.135.235:8080
13#.##.148.211:8080
21#.#.24.148:8080
56.##.178.178:8080
22#.##.109.245:8080
30.###.105.172:8080
21#.##.92.188:8080
15#.##.168.242:8080
92.##.194.207:37215
19#.##9.98.75:37215
17#.###.253.35:37215
51.###.197.184:37215
18#.###.188.49:37215
51.###.197.184:7574
51.###.197.184:80
23#.##5.207.172:81
23#.##5.207.172:80
23#.###.207.172:49152
36.###.121.61:8443
36.###.121.61:8080
13#.##.148.211:80
56.##.178.178:80
22#.##.109.245:80
3.###.135.235:80
30.###.105.172:80
21#.##.92.188:80
15#.##.168.242:80
15#.##.235.235:80
15#.##8.34.71:80
20#.##2.85.183:8080
20#.##.241.178:8080
20#.##.32.187:8080
21#.#.24.148:80
20#.###.208.221:8080
20#.##.167.16:8080
20#.###.235.215:8080
95.##.241.178:80
95.###.85.183:80
88.##.167.16:80
84.###.208.221:80
91.###.235.215:80
82.##.32.187:80
51.###.197.184:5555
30.###.16.111:52869
15#.###.122.85:52869
91.###.134.128:52869
41.###.208.221:52869
21#.##5.37.32:52869
16#.##.241.178:52869
15#.##7.27.89:52869
21#.##5.12.4:52869
10#.###.89.205:52869
15#.###.35.169:52869
0.###.138.127:8080
18#.###.220.248:8080
15.#.42.15:8080
21#.###.120.106:8080
18#.##1.43.14:8080
23#.##8.220.65:8080
15#.#.254.234:8080
0.###.138.127:80
16#.##.56.226:8080
14#.#.135.187:8080
20#.###.192.182:8080
23#.##8.220.65:80
14#.#.135.187:37215
18#.###.220.248:37215
0.###.138.127:37215
21#.###.120.106:37215
15#.#.254.234:37215
18#.###.220.248:7574
10#.##1.49.225:80
10#.##1.49.225:81
20.##.8.124:49152
20.##.8.124:8443
20.##.8.124:8080
14#.##.199.167:8080
21#.##1.120.106:80
18#.##7.220.248:80
15.#.42.15:80
18#.##1.43.14:80
15#.#.254.234:80
16#.##.56.226:80
20#.##0.192.182:80
14#.#.135.187:80
20#.##.113.184:8080
20#.##9.139.90:8080
20#.###.119.111:8080
20#.##3.157.29:8080
20#.##3.245.4:8080
20#.##7.50.53:8080
5.###.157.29:80
88.##3.245.4:80
2.###.119.111:80
11#.##9.139.90:80
18#.##7.50.53:80
95.##.113.184:80
18#.###.220.248:5555
11#.###.111.123:52869
17#.###.139.90:52869
11#.#.48.113:52869
15#.##7.50.53:52869
14#.##.199.167:52869
20.#.#05.127:52869
59.###.166.167:52869
50.#.#33.157:52869
17#.##.25.213:52869
95.###.241.178:52869
21#.##6.243.91:8080
67.###.239.123:8080
70.##.160.210:8080
29.###.141.78:8080
16#.##3.59.203:8080
89.##.237.150:8080
21#.##4.175.12:8080
18#.###.249.220:8080
17#.##8.42.127:8080
47.##.7.253:8080
21#.###.243.91:37215
16#.###.59.203:37215
89.##.237.150:37215
67.###.239.123:37215
70.##.160.210:37215
22#.##.44.32:7574
22#.##.44.32:5555
22#.#4.44.32:80
22#.#4.44.32:81
19#.###.77.224:49152
19#.##2.77.224:8443
19#.##2.77.224:8080
22#.###.212.190:8080
21#.##6.243.91:80
16#.##3.59.203:80
67.###.239.123:80
70.##.160.210:80
18#.##2.249.220:80
17#.##8.42.127:80
89.##.237.150:80
21#.##4.175.12:80
47.##.7.253:80
29.###.141.78:80
20#.###.104.108:8080
18#.###.203.172:8080
18#.##.204.50:8080
20#.###.147.210:8080
20#.##7.66.37:8080
18#.##.231.157:8080
89.##.204.50:80
21#.##5.104.108:80
11#.##7.147.210:80
18#.##7.66.37:80
21#.##.231.157:80
37.###.203.172:80
16#.###.152.111:52869
20#.###.149.108:52869
57.###.220.151:52869
22.##.120.231:52869
7.###.74.29:52869
15#.###.17.189:52869
58.###.193.10:52869
11#.###.27.133:52869
6.##.#95.181:52869
20.###.64.56:52869
58.###.193.10:8080
15#.##5.17.189:8080
7.###.74.29:8080
16#.###.152.111:8080
6.##.#95.181:8080
57.###.220.151:8080
20#.###.149.108:8080
22.##.120.231:8080
11#.##7.27.133:8080
20.###.64.56:8080
11#.###.61.193:37215
10#.##.163.203:37215
19#.###.12.245:37215
15.###.109.215:37215
14#.##.24.49:37215
15.###.109.215:7574
15.###.109.215:80
15.###.109.215:81
18#.##4.241.190:80
18#.###.241.190:49152
18#.###.241.190:8443
69.##.99.82:8080
58.###.193.10:80
15#.##5.17.189:80
7.###.74.29:80
6.##.195.181:80
20#.##4.149.108:80
11#.##7.27.133:80
57.###.220.151:80
20.##3.64.56:80
16#.##4.152.111:80
22.##.120.231:80
18#.##7.98.28:8080
20#.###.178.164:8080
20#.##.123.116:8080
20#.##.53.176:8080
20#.#.174.189:8080
20#.###.233.228:8080
78.###.87.164:80
14#.##2.10.135:80
78.###.65.252:80
18#.##2.73.42:80
11#.##.202.220:80
10#.##.204.20:80
15.###.109.215:5555
22#.###.10.135:52869
84.##.102.65:52869
23.###.182.73:52869
18#.###.160.69:52869
22#.##.126.155:52869
11#.###.24.100:52869
17#.##.164.83:52869
12#.##.169.88:52869
76.##.204.20:52869
73.##.153.13:52869
22#.##2.10.135:8080
23.###.182.73:8080
18#.##3.160.69:8080
11#.##2.24.100:8080
76.##.204.20:8080
84.##.102.65:8080
17#.##.164.83:8080
22#.##.126.155:8080
12#.##.169.88:8080
73.##.153.13:8080
80.#.#54.189:37215
12#.##.206.156:37215
22#.##.197.235:37215
14#.##.179.206:37215
98.##.145.7:37215
22#.##.197.235:7574
22#.##.197.235:5555
22#.##.197.235:80
18#.##2.0.116:81
18#.##2.0.116:80
18#.##2.0.116:49152
16#.##.47.176:8443
16#.##.47.176:8080
21#.##.184.17:23
22#.##2.10.135:80
84.##.102.65:80
18#.##3.160.69:80
17#.##.164.83:80
22#.##.126.155:80
73.##.153.13:80
76.##.204.20:80
20#.#.175.16:8080
20#.###.196.102:8080
23.###.182.73:80
12#.##.169.88:80
20#.##1.47.113:8080
11#.##2.24.100:80
18#.###.135.188:8080
20#.##.135.169:8080
18#.##6.134.58:8080
18#.##3.122.137:80
88.##3.44.42:80
5.##.125.217:80
37.##8.32.99:80
5.##.31.234:80
21#.##3.154.167:80
76.##.193.122:52869
13#.##.31.234:52869
13#.###.217.243:52869
20#.##8.32.99:52869
13#.##.220.82:52869
19.##.243.154:52869
21#.##1.54.40:52869
15#.##.162.45:52869
41.###.204.32:52869
14#.###.254.210:52869
96.###.185.104:8080
18#.##.178.218:8080
34.###.34.230:8080
98.###.226.72:8080
13#.##0.54.103:8080
21#.##.20.130:8080
48.###.137.19:8080
20#.##.95.231:8080
15#.###.234.229:8080
12#.##7.64.72:8080
96.###.185.104:37215
21#.##.20.130:37215
13#.###.54.103:37215
98.###.226.72:37215
18#.##.178.218:37215
21#.##.20.130:7574
18#.##.105.222:80
18#.##.105.222:81
18#.##.105.222:49152
23#.##8.17.92:8443
23#.##8.17.92:8080
34.###.34.230:80
13#.##0.54.103:80
18#.##.178.218:80
98.###.226.72:80
21#.##.20.130:80
20#.##.95.231:80
12#.##7.64.72:80
15#.##2.234.229:80
96.###.185.104:80
48.###.137.19:80
18#.##7.247.50:8080
20#.##0.11.74:8080
20#.###.239.206:8080
20#.###.253.153:8080
18#.##6.222.68:8080
18#.###.189.105:8080
21#.##2.189.105:80
31.###.253.153:80
84.##0.11.74:80
21#.##7.247.50:80
91.###.239.206:80
11#.##6.222.68:80
21#.##.20.130:5555
19#.###.50.200:52869
94.###.31.57:52869
19#.##.176.222:52869
99.###.189.105:52869
13#.##.238.253:52869
13#.###.239.206:52869
64.###.15.242:52869
17#.###.209.140:52869
22#.##.117.125:52869
59.###.132.212:52869
19#.##8.220.41:8080
10#.##9.16.99:8080
88.###.115.163:8080
12#.##9.197.38:8080
22#.##6.23.96:8080
42.###.187.212:8080
20#.##.53.110:8080
52.##.79.254:8080
12#.###.138.224:8080
22#.##.210.208:8080
22#.##.210.208:80
22#.##6.23.96:37215
19#.###.220.41:37215
12#.###.138.224:37215
88.###.115.163:37215
12#.###.197.38:37215
22#.##6.23.96:7574
14#.##.199.169:80
14#.##.199.169:81
16#.##4.6.138:49152
16#.##4.6.138:8443
16#.##4.6.138:8080
19#.##8.220.41:80
10#.##9.16.99:80
22#.##6.23.96:80
42.###.187.212:80
20#.##.53.110:80
52.##.79.254:80
12#.##9.197.38:80
88.###.115.163:80
20#.#.20.184:8080
20#.##1.76.51:8080
12#.##0.138.224:80
18#.##.181.213:8080
18#.##5.40.178:8080
18#.##6.42.2:8080
18#.##.151.78:8080
88.##1.76.51:80
42.#.20.184:80
58.##.181.213:80
42.##6.42.2:80
11#.##.151.78:80
21#.##5.40.178:80
22#.##6.23.96:5555
37.###.42.2:52869
3.###.125.40:52869
62.##.51.10:52869
23#.#.38.21:52869
24.###.18.151:52869
36.#.#0.184:52869
58.##.55.66:52869
48.###.5.212:52869
19#.###.105.87:52869
13#.##0.0.146:52869
10#.##7.87.124:8080
93.###.234.191:8080
22#.##6.52.72:8080
12#.##0.13.40:8080
11#.##7.31.199:8080
18#.##7.99.208:8080
65.###.36.120:8080
21#.##.160.89:8080
18#.##.162.36:8080
22.###.214.84:8080
22#.##6.52.72:37215
22.###.214.84:37215
10#.###.87.124:37215
93.###.234.191:37215
12#.##0.13.40:37215
12#.##0.13.40:7574
51.###.245.231:80
51.###.245.231:81
65.###.197.58:49152
65.###.197.58:8443
65.###.197.58:8080
17.##.81.160:8080
65.###.36.120:80
21#.##.160.89:80
22.###.214.84:80
22#.##6.52.72:80
10#.##7.87.124:80
12#.##0.13.40:80
11#.##7.31.199:80
18#.##7.99.208:80
18#.##.162.36:80
93.###.234.191:80
18#.##.238.8:8080
18#.##.106.201:8080
18#.##.72.126:8080
18#.##0.163.5:8080
18#.##.126.61:8080
18#.##.76.165:8080
10#.##0.163.5:80
95.##.106.201:80
10#.#5.238.8:80
18#.##.76.165:80
21#.##.126.61:80
84.##.72.126:80
12#.##0.13.40:5555
16#.###.202.223:52869
15#.###.239.185:52869
28.#.#9.147:52869
14#.###.138.138:52869
22#.##.238.37:52869
10#.###.223.53:52869
58.###.5.117:52869
90.###.57.12:52869
32.##.85.36:52869
12#.###.93.156:52869
28.#.#9.147:8080
22#.##.238.37:8080
10#.##2.223.53:8080
15#.###.239.185:8080
90.###.57.12:8080
58.###.5.117:8080
32.##.85.36:8080
12#.##6.93.156:8080
22#.##.238.37:80
16#.###.202.223:8080
14#.###.138.138:8080
10#.###.223.53:37215
14#.###.138.138:37215
22#.##.238.37:37215
16#.###.202.223:37215
15#.###.239.185:37215
43.##.146.66:7574
43.##.146.66:80
43.##.146.66:81
5.###.223.49:80
5.###.223.49:49152
5.###.223.49:8443
5.###.223.49:8080
23#.##0.141.67:8080
28.#.19.147:80
32.##.85.36:80
12#.##6.93.156:80
14#.##1.138.138:80
16#.##5.202.223:80
10#.##2.223.53:80
15#.##6.239.185:80
58.##5.5.117:80
90.##4.57.12:80
43.##.146.66:5555
20#.##.38.77:8080
18#.##7.58.20:8080
18#.###.201.137:8080
20#.##1.52.64:8080
20#.##7.54.162:8080
20#.###.148.222:8080
19#.##7.201.137:80
11#.##7.54.162:80
62.##1.52.64:80
17#.##7.58.20:80
42.##.38.77:80
89.###.148.222:80
17.##.20.115:52869
86.###.20.221:52869
16#.##.182.230:52869
15#.##5.24.58:52869
43.###.169.50:52869
10#.###.203.160:52869
20.###.127.158:52869
43.#.#95.165:52869
49.###.224.227:52869
14#.##.209.143:52869
15#.##5.24.58:8080
17.##.20.115:8080
86.###.20.221:8080
43.#.#95.165:8080
49.###.224.227:8080
16#.##.182.230:8080
10#.###.203.160:8080
43.###.169.50:8080
14#.##.209.143:8080
20.###.127.158:8080
15#.##5.24.58:37215
17.##.20.115:37215
16#.##.182.230:37215
43.###.169.50:37215
86.###.20.221:37215
10#.##4.12.62:7574
10#.##4.12.62:80
10#.##4.12.62:81
16#.##6.38.205:80
16#.###.38.205:49152
16#.##6.38.205:8443
16#.##.190.253:8080
17.##.20.115:80
86.###.20.221:80
49.###.224.227:80
16#.##.182.230:80
15#.##5.24.58:80
43.#.195.165:80
43.###.169.50:80
14#.##.209.143:80
10#.##8.203.160:80
20.###.127.158:80
18#.###.231.229:8080
18#.###.199.229:8080
18#.##6.29.245:8080
20#.##7.16.114:8080
20#.##8.51.120:8080
18#.##.240.15:8080
92.##7.24.16:80
88.###.72.156:80
95.###.119.131:80
11#.#5.152.6:80
17#.##4.72.21:80
89.###.194.146:80
10#.##4.12.62:5555
66.###.24.16:52869
22#.##.158.119:52869
11#.###.194.97:52869
22#.##.152.6:52869
77.###.194.72:52869
30.##.156.176:52869
46.###.226.8:52869
54.##.234.2:52869
84.###.57.248:52869
12#.###.254.247:52869
22#.##.158.119:8080
30.##.156.176:8080
11#.##2.194.97:8080
22#.##.152.6:8080
66.###.24.16:8080
54.##.234.2:8080
22#.##.158.119:80
77.###.194.72:8080
46.###.226.8:8080
84.###.57.248:8080
22#.#5.152.6:80
12#.###.254.247:8080
32.###.180.24:37215
9.###.104.118:37215
18#.##.35.115:37215
69.###.202.115:37215
24.###.178.146:37215
18#.##.35.115:7574

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

DNS ASK:

13##.##idsoldier.fun

Sends data to the following servers:

17.###.222.59:23
12#.##2.116.127:23
74.###.197.56:23
18#.##1.96.235:23
10#.##0.109.243:23
19#.##.237.213:23
97.###.231.214:23
14#.#.25.55:23
39.##.255.26:23
21#.##.184.17:23

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations