Linux.Siggen.4120

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

/bin/busybox

Modifies firewall settings:

iptables -F

Launches processes:

sh -c iptables -F

Network activity:

Awaits incoming connections on ports:

0.0.0.0:6351
0.0.0.0:55808

Establishes connection:

8.#.8.8:53
1.#.1.1:53
0.0.0.0:30047
19#.###.18.144:30047

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

HTTP GET requests:

ic###azip.com/

DNS ASK:

ic###azip.com
sw###hnets.net
th###nigga.me

Sends data to the following servers:

14#.##7.112.64:23
9.###.137.225:23
31.###.129.178:23
61.###.179.248:23
19#.##6.179.238:23
72.###.129.120:23
20#.##1.172.42:23
45.###.242.14:23
64.###.241.163:23
69.##8.62.91:23
18#.##3.143.76:23
10#.##1.216.127:23
18#.##0.191.41:23
19#.#.81.36:23
10#.#0.42.84:23
18.##.141.34:23
13#.##6.45.210:23
64.##6.15.98:23
15#.##3.249.103:23
90.###.99.176:23
20#.##3.153.62:23
46.###.106.244:23
13#.#.106.211:23
12#.##3.216.151:23
83.##.132.30:23
13#.##6.113.156:23
12#.##4.0.237:23
14#.##4.114.34:23
12#.##0.218.112:23
94.##8.29.67:23
13#.##8.9.104:23
22#.##8.87.214:23
72.###.134.48:23
11#.##4.186.181:23
91.##.85.145:23
58.###.243.19:23
14#.##.167.113:23
17#.##5.66.108:23
16#.##.124.212:23
78.##.33.124:23
17#.##0.205.78:23
12#.##5.213.250:23
19#.##4.102.2:23
13#.#01.42.1:23
14.###.177.206:23
90.#.173.158:23
82.##.52.147:23
17#.##6.199.24:23
83.###.112.193:23
20#.##.172.95:23
18#.#7.4.90:23
13#.##1.240.228:23
16#.##.42.215:23
53.###.87.197:23
89.##.48.247:23
22#.#8.58.26:23
1.###.254.10:23
31.##2.8.113:23
17#.##4.103.135:23
15#.#.35.101:23
20#.##7.109.178:23
18#.##.218.71:23
14#.##8.146.58:23
16#.##4.24.160:23
45.##.183.202:23
14#.##.85.136:23
97.###.218.60:23
34.##.150.23:23
51.##.232.187:23
18#.##.143.106:23
16#.##.249.102:23
12#.##3.64.83:23
96.###.253.110:23
13#.##.151.216:23
14#.##3.179.182:23
13#.##.46.124:23
21#.##1.140.116:23
19#.##.254.160:23
11#.##7.240.12:23
19#.##8.211.130:23
13#.#6.90.73:23
16#.##.182.176:23
20#.#.42.68:23
5.###.117.171:23
16#.##9.116.180:23
16#.##.129.104:23
12#.##.52.208:23
22#.##4.194.234:23
91.###.66.154:23
49.###.249.97:23
10#.##2.8.173:23
14#.##4.226.147:23
38.###.106.231:23
65.##.27.169:23
17.##.70.161:23
19#.##3.248.164:23
99.###.252.48:23
16#.#7.111.0:23
67.###.128.165:23
19#.##4.140.248:23
15#.##0.223.227:23
18#.##2.165.109:23
21#.##2.224.48:23
15#.##.188.123:23
31.###.218.58:23
53.###.136.143:23
10#.##4.71.138:23
78.##.71.156:23
50.###.177.145:23
66.###.164.202:23
52.###.121.21:23
10#.##5.4.176:23
17#.#1.9.241:23
34.###.212.87:23
12#.##.193.198:23
75.###.113.137:23
2.##.89.29:23
10#.##4.193.214:23
66.###.184.113:23
10#.##4.111.86:23
49.##.122.246:23
52.###.206.50:23
14#.##8.82.96:23
10#.##.109.109:23
22#.##0.49.97:23
16#.##.28.165:23
18#.##9.94.34:23
16#.##0.238.46:23
13#.##7.248.63:23
13#.##7.167.168:23
15#.#.79.165:23
15#.##.136.231:23
21#.##5.125.70:23
99.###.188.240:23
22#.##.68.224:23
14#.##0.253.210:23
14#.##6.131.69:23
99.###.77.177:23
15#.##9.206.223:23
38.###.48.156:23
23.###.129.107:23
19#.##3.105.228:23
8.###.241.235:23
15#.##5.121.236:23
15#.##.166.220:23
53.###.70.210:23
14#.##0.97.195:23
47.##.189.203:23
81.##5.66.90:23
18#.##5.230.244:23
77.##.12.242:23
16#.##1.27.163:23
94.###.118.206:23
20#.#4.80.86:23
11#.##.106.146:23
14#.##3.175.158:23
16#.##1.14.118:23
16#.##0.111.232:23
12#.##9.80.212:23
35.##.200.54:23
15#.##6.193.105:23
19.##.244.235:23
10#.##.191.135:23
13#.##.230.136:23
27.##.54.11:23
11#.##7.94.16:23
11#.##9.103.38:23
19#.##3.190.235:23
15#.##.121.46:23
48.###.208.175:23
18#.#90.1.98:23
20#.##9.223.216:23
20.##7.56.30:23
16#.##0.72.19:23
57.##.83.210:23
20#.##7.228.138:23
64.###.58.214:23
94.##.158.137:23
16#.##.107.103:23
74.###.148.209:23
41.###.176.10:23
49.##.212.244:23
24.###.104.80:23
14#.##5.199.174:23
19#.##3.38.151:23
60.###.185.169:23
38.##0.83.97:23
2.###.179.138:23
15#.##.57.143:23
11#.##6.39.184:23
16#.##2.214.52:23
19.##.251.219:23
13#.##7.224.70:23
12#.##4.43.254:23
10#.##8.88.141:23
21#.##.97.205:23
17#.##.186.32:23
12#.##3.124.46:23
97.##.218.64:23
12#.##.27.234:23
15#.##7.167.123:23
13#.##.85.126:23
17#.##.250.184:23
17#.##8.116.168:23
70.##.91.46:23
40.##3.8.174:23
10#.##5.72.164:23
17#.##3.21.11:23
83.###.110.25:23
10#.##2.34.194:23
14#.##8.148.19:23
11#.##8.141.150:23
2.###.145.56:23
12#.##.229.34:23
16#.##5.88.223:23
81.##.220.247:23
10#.##3.112.233:23
17#.##7.127.27:23
65.###.125.41:23
15#.##2.202.185:23
15#.##5.115.15:23
99.#.79.49:23
80.###.123.103:23
99.###.122.219:23
19#.#5.2.193:23
50.###.238.210:23
23.##.76.126:23
21#.##1.240.191:23
10#.##6.88.91:23
14#.##5.58.193:23
10#.##.218.73:23
37.##.186.178:23
10#.##1.120.161:23
16#.##3.208.143:23
19#.##7.96.31:23
10#.##5.150.188:23
15#.#8.82.63:23
20#.##.16.135:23
21#.##.108.103:23
18#.##7.173.30:23
19#.##2.204.247:23
15#.##5.67.194:23
53.##.29.141:23
31.###.39.144:23
11#.##6.209.54:23
72.##.30.172:23
39.##.39.105:23
16#.##5.170.30:23
18.###.184.181:23
54.##9.37.46:23
16#.##7.252.236:23
10#.##.33.141:23
87.###.226.192:23
10#.##2.212.135:23
17.##.113.219:23
16#.##5.174.152:23
13#.##9.68.123:23
13#.##.72.101:23
22#.##3.89.133:23
96.##.62.226:23
16#.##3.254.113:23
93.##.176.11:23
90.###.102.22:23
73.###.206.145:23
19#.##.52.156:23
70.###.159.26:23
35.###.202.91:23
21#.##6.173.91:23
15#.##9.254.174:23
19#.##.191.50:23
20#.##3.115.143:23
4.#.#46.199:23
15#.##4.17.230:23
11#.##3.25.26:23
13#.##8.155.121:23
13#.##3.143.190:23
20#.##9.147.9:23
14#.##2.2.155:23
14#.##9.119.101:23
10#.##8.229.63:23
21#.##1.127.112:23
19#.##9.162.241:23
10#.#4.56.98:23
13.##.15.181:23
13.###.100.190:23
14#.##0.227.210:23
13#.##9.190.136:23
19#.##5.18.217:23
21#.#4.60.78:23
42.###.12.240:23
74.###.167.75:23
90.##4.197.9:23
23.##0.85.17:23
20#.##.239.242:23
24.##.156.121:23
41.##.136.132:23
22#.##.76.176:23
17#.##.217.198:23
77.##1.68.28:23
16#.##1.36.90:23
51.##.236.237:23
12#.##0.228.112:23
10#.##3.167.153:23
20#.##4.106.249:23
21#.##.178.44:23
21#.##2.127.218:23
68.##.133.8:23
19#.##2.120.85:23
19#.##.231.46:23
20.###.161.241:23
20#.##4.142.167:23
13#.##0.105.109:23
73.##.38.54:23
44.###.50.219:23
20#.##6.154.242:23
18#.##.126.71:23
53.###.40.124:23
37.###.97.145:23
20#.##.46.174:23
20#.#.88.37:23
19#.##8.187.19:23
18#.##.246.141:23
95.##.69.88:23
11#.##9.37.102:23
95.###.39.181:23
15#.##.149.255:23
12#.##4.234.170:23
16#.#.26.1:23
22#.##6.200.172:23
16#.##8.60.120:23
71.##.123.237:23
81.###.189.210:23
17#.##6.141.44:23
13#.##4.234.61:23
12#.##1.62.139:23
99.###.221.138:23
64.##.191.104:23
13#.##2.114.13:23
16#.##9.175.35:23
19#.##.138.217:23
13#.##4.184.118:23
73.##.50.45:23
46.##7.23.63:23
17#.##3.47.82:23
21#.##6.11.92:23
14#.#5.35.34:23
16#.##4.131.157:23
54.##0.53.98:23
11#.##.70.184:23
14#.##9.127.108:23
21#.##0.21.95:23
10#.##5.245.224:23
15#.#19.76.0:23
77.##8.2.166:23
15#.##4.62.157:23
15#.##.113.52:23
14#.#.47.9:23
10#.##8.75.71:23
45.###.101.184:23
13#.##.161.116:23
47.###.124.182:23
67.###.100.77:23
18#.#.199.236:23
13#.##.205.223:23
16#.##4.230.116:23
11#.##0.202.4:23
17#.##1.62.129:23
34.##6.172.4:23
20#.##8.125.9:23
13#.##4.66.25:23
18#.##9.183.71:23
17.###.36.164:23
24.#.188.104:23
77.###.227.145:23
16#.##0.199.60:23
76.###.113.187:23
19#.##0.179.204:23
18#.#38.33.4:23
14#.##.217.83:23
20#.##8.180.65:23
17#.##.234.122:23
16#.##6.195.7:23
98.###.10.228:23
17.##.24.90:23
18.###.118.118:23
11#.##2.2.189:23
18#.##5.120.247:23
22#.#.212.8:23
68.##.186.216:23
99.###.206.246:23
18#.##5.108.0:23
10#.##4.42.156:23
19#.##1.155.32:23
16#.##.199.150:23
19#.##9.88.126:23
92.###.183.87:23
14.###.212.55:23
16#.##3.206.138:23
14#.##.205.21:23
78.###.121.41:23
14#.##4.125.49:23
21#.##7.210.124:23
15#.##3.195.4:23
52.###.30.176:23
59.###.154.63:23
19#.##6.213.95:23
18#.##.149.236:23
19#.##6.10.109:23
13#.##4.154.4:23
17#.##8.230.36:23
61.##.254.92:23
13.###.145.19:23
13.###.170.249:23
66.###.197.40:23
99.###.56.176:23
8.##.129.10:23
43.###.106.163:23
16#.##6.142.145:23
53.###.192.140:23
16#.##.199.152:23
22#.##.68.198:23
25.###.137.32:23
52.##.60.195:23
23.##.152.155:23
15#.##6.7.146:23
71.###.203.37:23
19.##.3.206:23
19#.##.204.206:23
11#.##7.109.80:23
19.###.221.133:23
19#.#6.6.176:23
16#.##9.36.74:23
80.#.169.226:23
72.##7.120.0:23
25.##.214.181:23
84.###.226.178:23
14#.##0.186.199:23
86.##.3.139:23
12#.#.16.178:23
18#.##5.204.6:23
17.###.231.186:23
16#.##4.51.145:23
40.##.96.79:23
15#.#.196.48:23
19#.##6.165.171:23
19#.##.170.50:23
10#.##6.117.170:23
21#.##8.199.113:23
12.##.67.14:23
16#.##.254.119:23
95.###.112.212:23
13#.##6.201.131:23
43.###.72.138:23
10#.##5.167.254:23
13#.##9.157.123:23
12#.#9.135.4:23
20#.##7.63.113:23
12#.##4.161.37:23
15#.##.45.212:23
24.##9.53.21:23
21#.##.247.45:23
9.###.233.86:23
12#.##1.0.230:23
14#.##9.78.149:23
18.###.146.219:23
45.##.78.249:23
65.#.212.110:23
20#.#54.0.53:23
21#.##.255.57:23
12#.##.145.15:23
17#.##1.87.63:23
48.#.83.144:23
43.###.191.160:23
18#.##2.219.113:23
51.###.156.172:23
10#.#6.28.16:23
78.###.205.142:23
19#.##5.186.178:23
32.###.129.149:23
13#.##7.217.69:23
19#.##.184.235:23
18#.##9.77.62:23
93.##7.56.60:23
19.#.123.148:23
11#.##5.147.216:23
13#.##4.174.73:23
10#.##.75.229:23
13#.##7.165.121:23
50.###.161.77:23
68.###.50.202:23
12#.##.159.244:23
10#.##.206.13:23
10#.##2.136.161:23
19#.#.140.16:23
14#.##2.46.235:23
16#.##8.45.137:23
45.#.41.205:23
15#.##7.251.61:23
85.###.144.57:23
21#.##.233.198:23
12#.##9.169.69:23
10#.##7.190.56:23
13#.##.211.20:23
83.###.154.103:23
22#.##5.97.162:23
83.##.207.163:23
51.###.147.84:23
18.###.149.221:23
21#.##9.79.149:23
87.##.89.152:23
11#.##.117.131:23
14#.##4.255.25:23
16#.##.78.205:23
17#.#91.6.52:23
21#.##.95.114:23
99.###.113.246:23
19#.##.59.238:23
88.##.183.228:23
84.#.124.222:23
13#.##3.170.249:23
11#.##.164.19:23
11#.##4.135.74:23
17#.#.96.233:23
40.##.209.83:23
98.##.123.3:23
13#.#49.5.23:23
15#.##.156.218:23
19#.##.177.220:23
15#.##.11.180:23
43.###.245.88:23
22#.#.54.206:23
12#.##6.100.202:23
38.##.60.34:23
10#.##6.170.204:23
24.###.154.62:23
15#.#4.187.5:23
12#.##0.205.100:23
13#.##.158.176:23
12#.#4.1.93:23
87.#.176.43:23
15#.##.200.128:23
15#.##.249.71:23
11#.##.169.57:23
14#.#.132.99:23
13#.##0.144.63:23
15#.##1.177.87:23
21#.##0.15.86:23
90.##.161.138:23
20#.#.84.10:23
19#.##6.79.32:23
46.##8.142.1:23
60.###.240.59:23
27.##.45.97:23
32.###.10.181:23
19.###.241.255:23
20#.##4.253.15:23
76.##.34.82:23
16#.#72.1.68:23
95.###.111.253:23
10#.##3.70.67:23
13#.##.227.144:23
22#.##3.133.223:23
17#.##3.168.58:23
20#.##7.146.53:23
2.##.98.150:23
17#.##7.253.82:23
85.##9.0.132:23
18#.##1.48.45:23
17#.##2.33.145:23
19#.##0.10.200:23
21#.##1.24.238:23
95.##.48.135:23
17#.##3.49.170:23
19#.##9.213.10:23
92.###.31.185:23
97.##.48.174:23
13#.##8.65.199:23
11#.##0.91.91:23
46.##2.86.38:23
93.###.56.246:23
11#.##.104.130:23
38.##2.205.6:23
20#.##.228.241:23
16#.##0.1.222:23
60.##.244.172:23
20#.##5.0.203:23
20#.##8.193.202:23
99.##.116.15:23
15#.##2.120.181:23
10#.##.105.11:23
15#.##.32.159:23
20#.##7.101.124:23
10#.#5.52.88:23
19#.#2.61.36:23
14#.##9.159.127:23
37.###.153.160:23
19#.##5.35.17:23
12#.##.221.240:23
31.###.64.216:23
74.##.24.81:23
16#.##6.44.188:23
19.##.104.175:23
13#.##5.19.81:23
11#.##9.151.158:23
14#.##6.38.213:23
11#.##3.122.174:23
17#.##2.69.127:23
58.###.118.173:23
11#.##9.194.44:23
11#.##.25.124:23
14#.##1.84.194:23
15#.#26.79.5:23
18#.##1.38.96:23
19.###.154.144:23
12.##.248.195:23
65.###.34.129:23
35.##.60.153:23
14#.##6.119.43:23
4.###.99.125:23
4.###.113.0:23
18#.##3.105.32:23
36.###.215.192:23
12#.##6.57.240:23
10#.##.170.219:23
17#.##7.95.19:23
18#.##4.78.182:23
12#.##3.33.24:23
17#.#1.43.78:23
17#.##.183.221:23
80.##.102.229:23
12#.##.211.168:23
19#.##7.220.244:23
13#.##8.77.234:23
17#.#4.5.44:23
5.###.48.214:23
58.###.89.181:23
57.###.15.246:23
17.##.87.146:23
11#.##.130.10:23
17.###.190.144:23
68.#.77.61:23
20#.##.180.81:23
13#.##.12.158:23
14#.#.14.164:23
99.##6.114.7:23
78.##.183.243:23
32.###.248.158:23
15#.#7.5.183:23
10#.##.25.216:23
15#.#.121.110:23
13#.##0.149.157:23
13#.#34.78.1:23
11#.##.46.171:23
12#.##1.203.107:23
53.##3.8.101:23
38.###.164.42:23
37.##6.76.99:23
73.###.204.201:23
1.##.143.44:23
16#.#67.17.2:23
78.###.202.22:23
37.###.255.40:23
20#.##.73.210:23
15#.##7.111.245:23
19#.##0.22.153:23
14#.##5.108.83:23
14#.##8.42.125:23
18#.##.228.87:23
65.##.74.246:23
10#.##.193.52:23
15#.##.140.64:23
17#.##9.191.133:23
97.##8.54.58:23
10#.##5.130.141:23
95.###.228.85:23
83.##.32.8:23
17.###.147.192:23
14#.##2.1.185:23
10#.##2.210.73:23
99.###.230.146:23
16#.##3.0.118:23
60.##.107.5:23
52.###.166.25:23
70.###.253.147:23
39.##.37.176:23
66.###.61.143:23
22#.##.82.142:23
16#.##5.32.39:23
78.##.107.243:23
20#.##.127.193:23
61.###.78.112:23
19#.##2.36.180:23
15#.##.28.203:23
1.##.27.197:23
19#.##6.131.50:23
50.###.224.177:23
17#.##4.198.3:23
15#.##8.202.39:23
52.#.50.85:23
22#.##8.28.213:23
24.###.13.112:23
8.##.108.244:23
20#.##8.102.248:23
19#.##4.117.16:23
14#.##5.123.1:23
19#.#53.38.0:23
11#.##3.96.166:23
21#.##.227.105:23
99.###.45.166:23
21#.##0.43.247:23
18#.#1.29.34:23
93.##.5.153:23
8.###.120.240:23
20#.##1.61.125:23
13#.#4.158.4:23
23.###.217.235:23
63.##.56.241:23
11#.##0.120.249:23
20#.#.205.211:23
15#.##2.174.73:23
15#.##.108.52:23
23.##.164.60:23
14.###.184.195:23
12#.##.175.215:23
76.##5.98.48:23
13#.##.16.218:23
14#.#.151.105:23
64.##.51.49:23
19#.##8.232.156:23
22#.##1.186.231:23
15#.##3.95.100:23
12#.##0.217.233:23
90.#.121.172:23
14#.##.200.172:23
1.###.154.83:23
20.###.239.62:23
48.##1.2.167:23
42.##.248.45:23
13#.##0.113.14:23
44.###.169.166:23
20#.#7.0.135:23
34.##9.79.94:23
35.###.166.238:23
20#.##6.231.30:23
77.###.152.90:23
12#.##1.72.87:23
46.###.208.169:23
21#.##0.84.11:23
11#.##5.99.211:23
22#.##.125.51:23
31.##.156.104:23
10#.##7.118.232:23
12#.##.232.215:23
18#.##.45.154:23
15#.##6.103.253:23
16#.##.229.63:23
15#.#.208.193:23
20#.##1.196.31:23
11#.##2.84.126:23
14#.##.78.147:23
62.#.240.206:23
52.##.26.22:23
42.##.251.217:23
20#.##0.133.252:23
10#.##.195.204:23
19#.##9.212.160:23
11#.##7.96.176:23
43.##.1.232:23
16#.##.58.153:23
61.###.189.183:23
75.###.46.121:23
12#.#0.85.3:23

Receives data from the following servers:

1.#.1.1:53

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations