Linux.Siggen.4447

Technical Information

Malicious functions:

Substitutes application name for:

c0r0dikkgoc0am8g

Network activity:

Awaits incoming connections on ports:

127.0.0.1:6628

Establishes connection:

8.#.8.8:53
21#.##2.241.70:3074

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

DNS ASK:

xb##.solutions

Sends data to the following servers:

21#.##2.241.70:3074
10#.##.209.123:23
16#.##.204.18:23
15#.##8.33.159:23
71.##.200.63:23
12#.##.75.105:23
12#.#9.218.3:23
23.##8.14.52:23
14#.##3.9.158:23
22#.##.138.88:23
10#.##.214.218:23
78.##.229.57:23
21#.##.225.196:23
12#.##1.88.169:23
20#.##7.167.108:23
69.##.231.25:23
13#.##3.136.120:23
10#.##2.56.142:23
63.###.150.224:23
80.###.127.129:23
22#.##3.103.27:23
15#.#95.2.38:23
13#.##.161.15:23
15#.##0.33.49:23
67.###.245.237:23
1.##.8.78:23
19#.##7.213.250:23
17#.##4.116.64:23
80.##.34.152:23
59.##.137.216:23
18#.##.139.190:23
14#.##.91.145:23
44.##3.44.96:23
12#.##9.238.203:23
10#.##4.157.182:23
95.##.201.55:23
87.#.94.231:23
20#.##7.215.28:23
12#.##.254.235:23
18#.##7.199.6:23
18#.##.146.17:23
34.###.128.79:23
15#.##4.35.44:23
31.##.10.158:23
13#.##.164.50:23
12#.##5.253.203:23
22#.##7.123.236:23
21#.##1.68.12:23
22#.##.87.199:23
61.##.207.221:23
19#.##.182.245:23
17#.##4.36.12:23
74.###.85.167:23
14#.##.159.136:23
62.##.125.231:23
18#.##.208.73:23
17.###.116.148:23
22#.#7.37.90:23
59.###.228.56:23
20#.##9.174.218:23
18#.##3.89.230:23
17.###.201.68:23
19#.##.158.31:23
65.##.118.126:23
17#.##9.208.208:23
21#.##6.10.68:23
22#.##2.69.231:23
69.##.28.55:23
10#.##.222.170:23
18#.##8.9.101:23
12#.##3.231.125:23
19#.##0.57.143:23
16#.##.149.72:23
11#.##8.142.88:23
13#.##4.177.232:23
20#.##7.234.24:23
13#.##2.206.200:23
15#.##.58.115:23
82.###.133.196:23
17#.##8.174.63:23
69.##.194.246:23
60.##.43.175:23
19#.##.96.109:23
19#.#.164.181:23
15#.##1.142.115:23
17#.##2.69.178:23
17#.##1.199.38:23
10#.##.74.118:23
64.##.8.15:23
18#.##4.123.210:23
20#.##.244.196:23
34.###.153.157:23
13.###.220.123:23
17#.#1.79.36:23
16#.##5.171.119:23
91.##5.10.17:23
20#.##1.245.26:23
17#.#5.97.70:23
77.###.163.162:23
95.##.217.67:23
9.###.68.200:23
82.###.41.231:23
12#.##2.238.209:23
15#.##0.252.137:23
27.##.156.221:23
16#.##4.70.190:23
32.##4.104.8:23
15#.##.175.48:23
12#.##.104.229:23
13#.##7.40.48:23
19#.##4.177.239:23
18#.##.179.110:23
16.###.45.234:23
17#.#.76.255:23
14#.##.104.141:23
1.###.212.47:23
16#.##9.70.131:23
11#.#0.60.2:23
10#.##.151.113:23
17#.##.225.192:23
70.##.38.176:23
10#.#5.36.78:23
17#.##.166.115:23
92.##.200.16:23
15#.##4.143.97:23
43.###.238.14:23
15#.##.249.22:23
70.##4.15.45:23
37.###.204.43:23
19.###.206.13:23
21#.#9.79.34:23
17#.##6.74.28:23
48.###.230.206:23
11#.##6.238.138:23
81.###.236.122:23
89.##.109.48:23
73.###.115.203:23
94.###.124.177:23
74.###.232.113:23
41.##.118.71:23
14#.##2.255.154:23
16#.##0.114.105:23
42.#.241.237:23
12.###.251.205:23
12#.##0.60.248:23
36.###.181.182:23
21#.##0.116.124:23
19#.##0.84.194:23
17#.##.87.157:23
19#.##.188.138:23
13#.##0.197.125:23
54.##.68.54:23
10#.##9.228.174:23
14#.##5.135.85:23
12#.##.35.149:23
85.###.25.210:23
22#.##9.230.224:23
11#.##0.173.38:23
13#.#9.5.203:23
92.##.254.254:23
78.###.46.154:23
10#.##.196.93:23
15#.#.50.132:23
16#.#3.2.56:23
83.##.85.12:23
17#.##.163.189:23
59.###.39.114:23
32.###.254.236:23
19.###.155.146:23
16#.##.223.237:23
12#.##6.171.25:23
39.##.95.69:23
20#.##.47.174:23
23.##.195.8:23
10#.##1.176.191:23
65.##.207.198:23
11#.##5.29.141:23
82.##8.65.93:23
13#.##5.195.182:23
17.###.74.135:23
65.##.245.100:23
41.###.157.125:23
10#.##4.203.184:23
21#.##8.116.187:23
21#.##1.195.191:23
27.###.12.104:23
90.##2.65.83:23
23.##.119.42:23
39.###.193.218:23
67.###.52.159:23
13#.#8.64.58:23
60.##.68.34:23
68.##8.31.71:23
21#.#4.12.45:23
13#.##.66.185:23
20#.##7.167.56:23
17#.##6.162.199:23
22#.##3.50.150:23
89.###.216.201:23
12#.##1.150.58:23
11#.#9.43.87:23
41.##.39.178:23
13#.##4.177.62:23
14#.##3.78.248:23
38.##.163.102:23
16#.##.159.213:23
12#.##0.140.187:23
10#.##7.133.92:23
41.###.158.15:23
91.##.86.215:23
14.###.127.110:23
19#.##4.102.165:23
74.###.94.138:23
84.###.30.180:23
10#.##.83.180:23
16#.##.166.144:23
82.##.121.4:23
34.##.181.231:23
53.###.228.33:23
99.##.21.203:23
10#.##6.103.125:23
2.###.168.44:23
14#.##9.89.45:23
27.###.208.172:23
48.###.203.88:23
20#.##7.112.97:23
63.##.218.83:23
10#.##5.142.168:23
46.##.50.3:23
18.##.72.43:23
18#.##7.221.58:23
32.###.74.167:23
8.###.43.252:23
17#.##.218.220:23
17#.##2.146.76:23
19.##.70.133:23
10#.#.137.242:23
75.###.176.105:23
19#.#.28.151:23
81.###.143.145:23
2.###.168.44:23
90.###.229.39:23
15#.##1.155.82:23
61.##7.8.114:23
15#.#.240.36:23
14#.##.198.26:23
57.##.114.29:23
76.##.221.157:23
20#.##7.9.214:23
17#.##.97.122:23
17#.##.166.32:23
94.###.63.101:23
13#.##9.52.188:23
68.###.102.225:23
73.###.106.108:23
18#.##.19.237:23
17#.##9.174.122:23
10#.#0.51.96:23
16#.##2.235.169:23
11#.##3.171.10:23
16#.#6.6.190:23
16#.##.183.153:23
9.##.137.105:23
90.##8.212.7:23
19#.##0.178.131:23
72.#.67.146:23
24.###.234.157:23
97.###.64.122:23
36.#.81.22:23
19#.##8.40.240:23
15#.#2.21.38:23
14.##.71.10:23
18#.##1.125.39:23
10#.##9.138.21:23
12#.##.15.161:23
15#.##.27.253:23
10#.##5.66.251:23
14#.##.255.63:23
85.###.90.162:23
15#.##2.242.213:23
15#.##4.135.213:23
19#.##7.255.140:23
4.###.228.219:23
70.##.175.26:23
18#.##1.222.172:23
98.#.1.219:23
17#.##.200.34:23
11#.##.202.156:23
16#.##0.97.128:23
17#.##4.192.71:23
65.###.242.112:23
13#.##2.141.165:23
17#.##5.15.215:23
39.##.18.2:23
70.###.142.230:23
14#.##2.33.78:23
17#.##2.159.161:23
19#.##.20.109:23
5.##.132.176:23
18#.##3.229.117:23
18#.#16.98.9:23
13#.##.253.228:23
19#.#8.35.86:23
20#.##1.168.156:23
16#.##.144.109:23
47.#.31.73:23
15#.##1.224.91:23
11#.##4.112.111:23
10#.#5.4.209:23
97.##.212.168:23
18#.##4.249.208:23
12#.##2.213.253:23
63.###.251.125:23
92.###.135.183:23
10#.##8.226.76:23
16#.##7.253.86:23
39.##.164.47:23
11#.##.123.90:23
90.##.81.236:23
17#.#3.67.30:23
16#.##.162.29:23
13#.##5.243.17:23
18#.#23.59.4:23
14#.##.37.197:23
12#.#0.77.56:23
81.##.62.80:23
20#.##.228.209:23
61.###.194.203:23
65.##.195.33:23
11#.##9.36.255:23
11#.##.228.249:23
12#.##.148.160:23
11#.##9.17.86:23
10#.##6.23.43:23
19#.##3.1.243:23
22#.##6.13.48:23
68.###.149.169:23
15#.#97.75.7:23
14#.##0.56.99:23
48.###.129.10:23
39.##1.92.92:23
19#.##.21.140:23
13.##.11.29:23
18#.##3.19.176:23
22#.##1.60.138:23
17#.##.151.221:23
70.###.46.124:23
58.##5.96.79:23
15#.##7.58.70:23
16#.##3.188.97:23
18#.##9.159.79:23
18#.##.101.172:23
12#.#0.5.167:23
11#.#0.254.1:23
86.###.226.183:23
14#.##8.111.90:23
42.###.109.28:23
20#.##9.50.139:23
41.##.233.44:23
96.###.98.220:23
22#.##7.73.19:23
38.###.67.144:23
53.##.188.23:23
20#.##.217.143:23
95.##.45.159:23
80.##.140.103:23
65.###.183.16:23
90.###.185.26:23
67.###.29.254:23
13#.##.184.120:23
14#.##.117.17:23
20#.##4.45.34:23
4.###.22.135:23
19#.##1.235.212:23
53.###.187.51:23
14#.##6.206.178:23
11#.##4.28.190:23
16#.##1.15.199:23
18.##.198.89:23
22#.##0.41.73:23
80.###.135.201:23
69.##.214.10:23
15#.##1.64.245:23
13#.##.58.240:23
12#.##5.14.221:23
36.##.23.193:23
44.##1.8.231:23
14.##2.2.102:23
21#.##5.11.44:23
87.##.199.225:23
68.###.211.228:23
17#.##.239.213:23
13#.##1.174.151:23
85.###.12.243:23
12#.##4.195.77:23
18#.##3.138.132:23
15#.##.161.33:23
19#.##0.94.164:23
19#.##2.27.232:23

Receives data from the following servers:

21#.##2.241.70:3074

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations