Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Linux.Siggen.4447

Added to the Dr.Web virus database: 2022-03-13

Virus description added:

Technical Information

Malicious functions:
Substitutes application name for:
  • c0r0dikkgoc0am8g
Network activity:
Awaits incoming connections on ports:
  • 127.0.0.1:6628
Establishes connection:
  • 8.#.8.8:53
  • 21#.##2.241.70:3074
Attacks using a special dictionary (brute-force technique) via the Telnet protocol.
DNS ASK:
  • xb##.solutions
Sends data to the following servers:
  • 21#.##2.241.70:3074
  • 10#.##.209.123:23
  • 16#.##.204.18:23
  • 15#.##8.33.159:23
  • 71.##.200.63:23
  • 12#.##.75.105:23
  • 12#.#9.218.3:23
  • 23.##8.14.52:23
  • 14#.##3.9.158:23
  • 22#.##.138.88:23
  • 10#.##.214.218:23
  • 78.##.229.57:23
  • 21#.##.225.196:23
  • 12#.##1.88.169:23
  • 20#.##7.167.108:23
  • 69.##.231.25:23
  • 13#.##3.136.120:23
  • 10#.##2.56.142:23
  • 63.###.150.224:23
  • 80.###.127.129:23
  • 22#.##3.103.27:23
  • 15#.#95.2.38:23
  • 13#.##.161.15:23
  • 15#.##0.33.49:23
  • 67.###.245.237:23
  • 1.##.8.78:23
  • 19#.##7.213.250:23
  • 17#.##4.116.64:23
  • 80.##.34.152:23
  • 59.##.137.216:23
  • 18#.##.139.190:23
  • 14#.##.91.145:23
  • 44.##3.44.96:23
  • 12#.##9.238.203:23
  • 10#.##4.157.182:23
  • 95.##.201.55:23
  • 87.#.94.231:23
  • 20#.##7.215.28:23
  • 12#.##.254.235:23
  • 18#.##7.199.6:23
  • 18#.##.146.17:23
  • 34.###.128.79:23
  • 15#.##4.35.44:23
  • 31.##.10.158:23
  • 13#.##.164.50:23
  • 12#.##5.253.203:23
  • 22#.##7.123.236:23
  • 21#.##1.68.12:23
  • 22#.##.87.199:23
  • 61.##.207.221:23
  • 19#.##.182.245:23
  • 17#.##4.36.12:23
  • 74.###.85.167:23
  • 14#.##.159.136:23
  • 62.##.125.231:23
  • 18#.##.208.73:23
  • 17.###.116.148:23
  • 22#.#7.37.90:23
  • 59.###.228.56:23
  • 20#.##9.174.218:23
  • 18#.##3.89.230:23
  • 17.###.201.68:23
  • 19#.##.158.31:23
  • 65.##.118.126:23
  • 17#.##9.208.208:23
  • 21#.##6.10.68:23
  • 22#.##2.69.231:23
  • 69.##.28.55:23
  • 10#.##.222.170:23
  • 18#.##8.9.101:23
  • 12#.##3.231.125:23
  • 19#.##0.57.143:23
  • 16#.##.149.72:23
  • 11#.##8.142.88:23
  • 13#.##4.177.232:23
  • 20#.##7.234.24:23
  • 13#.##2.206.200:23
  • 15#.##.58.115:23
  • 82.###.133.196:23
  • 17#.##8.174.63:23
  • 69.##.194.246:23
  • 60.##.43.175:23
  • 19#.##.96.109:23
  • 19#.#.164.181:23
  • 15#.##1.142.115:23
  • 17#.##2.69.178:23
  • 17#.##1.199.38:23
  • 10#.##.74.118:23
  • 64.##.8.15:23
  • 18#.##4.123.210:23
  • 20#.##.244.196:23
  • 34.###.153.157:23
  • 13.###.220.123:23
  • 17#.#1.79.36:23
  • 16#.##5.171.119:23
  • 91.##5.10.17:23
  • 20#.##1.245.26:23
  • 17#.#5.97.70:23
  • 77.###.163.162:23
  • 95.##.217.67:23
  • 9.###.68.200:23
  • 82.###.41.231:23
  • 12#.##2.238.209:23
  • 15#.##0.252.137:23
  • 27.##.156.221:23
  • 16#.##4.70.190:23
  • 32.##4.104.8:23
  • 15#.##.175.48:23
  • 12#.##.104.229:23
  • 13#.##7.40.48:23
  • 19#.##4.177.239:23
  • 18#.##.179.110:23
  • 16.###.45.234:23
  • 17#.#.76.255:23
  • 14#.##.104.141:23
  • 1.###.212.47:23
  • 16#.##9.70.131:23
  • 11#.#0.60.2:23
  • 10#.##.151.113:23
  • 17#.##.225.192:23
  • 70.##.38.176:23
  • 10#.#5.36.78:23
  • 17#.##.166.115:23
  • 92.##.200.16:23
  • 15#.##4.143.97:23
  • 43.###.238.14:23
  • 15#.##.249.22:23
  • 70.##4.15.45:23
  • 37.###.204.43:23
  • 19.###.206.13:23
  • 21#.#9.79.34:23
  • 17#.##6.74.28:23
  • 48.###.230.206:23
  • 11#.##6.238.138:23
  • 81.###.236.122:23
  • 89.##.109.48:23
  • 73.###.115.203:23
  • 94.###.124.177:23
  • 74.###.232.113:23
  • 41.##.118.71:23
  • 14#.##2.255.154:23
  • 16#.##0.114.105:23
  • 42.#.241.237:23
  • 12.###.251.205:23
  • 12#.##0.60.248:23
  • 36.###.181.182:23
  • 21#.##0.116.124:23
  • 19#.##0.84.194:23
  • 17#.##.87.157:23
  • 19#.##.188.138:23
  • 13#.##0.197.125:23
  • 54.##.68.54:23
  • 10#.##9.228.174:23
  • 14#.##5.135.85:23
  • 12#.##.35.149:23
  • 85.###.25.210:23
  • 22#.##9.230.224:23
  • 11#.##0.173.38:23
  • 13#.#9.5.203:23
  • 92.##.254.254:23
  • 78.###.46.154:23
  • 10#.##.196.93:23
  • 15#.#.50.132:23
  • 16#.#3.2.56:23
  • 83.##.85.12:23
  • 17#.##.163.189:23
  • 59.###.39.114:23
  • 32.###.254.236:23
  • 19.###.155.146:23
  • 16#.##.223.237:23
  • 12#.##6.171.25:23
  • 39.##.95.69:23
  • 20#.##.47.174:23
  • 23.##.195.8:23
  • 10#.##1.176.191:23
  • 65.##.207.198:23
  • 11#.##5.29.141:23
  • 82.##8.65.93:23
  • 13#.##5.195.182:23
  • 17.###.74.135:23
  • 65.##.245.100:23
  • 41.###.157.125:23
  • 10#.##4.203.184:23
  • 21#.##8.116.187:23
  • 21#.##1.195.191:23
  • 27.###.12.104:23
  • 90.##2.65.83:23
  • 23.##.119.42:23
  • 39.###.193.218:23
  • 67.###.52.159:23
  • 13#.#8.64.58:23
  • 60.##.68.34:23
  • 68.##8.31.71:23
  • 21#.#4.12.45:23
  • 13#.##.66.185:23
  • 20#.##7.167.56:23
  • 17#.##6.162.199:23
  • 22#.##3.50.150:23
  • 89.###.216.201:23
  • 12#.##1.150.58:23
  • 11#.#9.43.87:23
  • 41.##.39.178:23
  • 13#.##4.177.62:23
  • 14#.##3.78.248:23
  • 38.##.163.102:23
  • 16#.##.159.213:23
  • 12#.##0.140.187:23
  • 10#.##7.133.92:23
  • 41.###.158.15:23
  • 91.##.86.215:23
  • 14.###.127.110:23
  • 19#.##4.102.165:23
  • 74.###.94.138:23
  • 84.###.30.180:23
  • 10#.##.83.180:23
  • 16#.##.166.144:23
  • 82.##.121.4:23
  • 34.##.181.231:23
  • 53.###.228.33:23
  • 99.##.21.203:23
  • 10#.##6.103.125:23
  • 2.###.168.44:23
  • 14#.##9.89.45:23
  • 27.###.208.172:23
  • 48.###.203.88:23
  • 20#.##7.112.97:23
  • 63.##.218.83:23
  • 10#.##5.142.168:23
  • 46.##.50.3:23
  • 18.##.72.43:23
  • 18#.##7.221.58:23
  • 32.###.74.167:23
  • 8.###.43.252:23
  • 17#.##.218.220:23
  • 17#.##2.146.76:23
  • 19.##.70.133:23
  • 10#.#.137.242:23
  • 75.###.176.105:23
  • 19#.#.28.151:23
  • 81.###.143.145:23
  • 2.###.168.44:23
  • 90.###.229.39:23
  • 15#.##1.155.82:23
  • 61.##7.8.114:23
  • 15#.#.240.36:23
  • 14#.##.198.26:23
  • 57.##.114.29:23
  • 76.##.221.157:23
  • 20#.##7.9.214:23
  • 17#.##.97.122:23
  • 17#.##.166.32:23
  • 94.###.63.101:23
  • 13#.##9.52.188:23
  • 68.###.102.225:23
  • 73.###.106.108:23
  • 18#.##.19.237:23
  • 17#.##9.174.122:23
  • 10#.#0.51.96:23
  • 16#.##2.235.169:23
  • 11#.##3.171.10:23
  • 16#.#6.6.190:23
  • 16#.##.183.153:23
  • 9.##.137.105:23
  • 90.##8.212.7:23
  • 19#.##0.178.131:23
  • 72.#.67.146:23
  • 24.###.234.157:23
  • 97.###.64.122:23
  • 36.#.81.22:23
  • 19#.##8.40.240:23
  • 15#.#2.21.38:23
  • 14.##.71.10:23
  • 18#.##1.125.39:23
  • 10#.##9.138.21:23
  • 12#.##.15.161:23
  • 15#.##.27.253:23
  • 10#.##5.66.251:23
  • 14#.##.255.63:23
  • 85.###.90.162:23
  • 15#.##2.242.213:23
  • 15#.##4.135.213:23
  • 19#.##7.255.140:23
  • 4.###.228.219:23
  • 70.##.175.26:23
  • 18#.##1.222.172:23
  • 98.#.1.219:23
  • 17#.##.200.34:23
  • 11#.##.202.156:23
  • 16#.##0.97.128:23
  • 17#.##4.192.71:23
  • 65.###.242.112:23
  • 13#.##2.141.165:23
  • 17#.##5.15.215:23
  • 39.##.18.2:23
  • 70.###.142.230:23
  • 14#.##2.33.78:23
  • 17#.##2.159.161:23
  • 19#.##.20.109:23
  • 5.##.132.176:23
  • 18#.##3.229.117:23
  • 18#.#16.98.9:23
  • 13#.##.253.228:23
  • 19#.#8.35.86:23
  • 20#.##1.168.156:23
  • 16#.##.144.109:23
  • 47.#.31.73:23
  • 15#.##1.224.91:23
  • 11#.##4.112.111:23
  • 10#.#5.4.209:23
  • 97.##.212.168:23
  • 18#.##4.249.208:23
  • 12#.##2.213.253:23
  • 63.###.251.125:23
  • 92.###.135.183:23
  • 10#.##8.226.76:23
  • 16#.##7.253.86:23
  • 39.##.164.47:23
  • 11#.##.123.90:23
  • 90.##.81.236:23
  • 17#.#3.67.30:23
  • 16#.##.162.29:23
  • 13#.##5.243.17:23
  • 18#.#23.59.4:23
  • 14#.##.37.197:23
  • 12#.#0.77.56:23
  • 81.##.62.80:23
  • 20#.##.228.209:23
  • 61.###.194.203:23
  • 65.##.195.33:23
  • 11#.##9.36.255:23
  • 11#.##.228.249:23
  • 12#.##.148.160:23
  • 11#.##9.17.86:23
  • 10#.##6.23.43:23
  • 19#.##3.1.243:23
  • 22#.##6.13.48:23
  • 68.###.149.169:23
  • 15#.#97.75.7:23
  • 14#.##0.56.99:23
  • 48.###.129.10:23
  • 39.##1.92.92:23
  • 19#.##.21.140:23
  • 13.##.11.29:23
  • 18#.##3.19.176:23
  • 22#.##1.60.138:23
  • 17#.##.151.221:23
  • 70.###.46.124:23
  • 58.##5.96.79:23
  • 15#.##7.58.70:23
  • 16#.##3.188.97:23
  • 18#.##9.159.79:23
  • 18#.##.101.172:23
  • 12#.#0.5.167:23
  • 11#.#0.254.1:23
  • 86.###.226.183:23
  • 14#.##8.111.90:23
  • 42.###.109.28:23
  • 20#.##9.50.139:23
  • 41.##.233.44:23
  • 96.###.98.220:23
  • 22#.##7.73.19:23
  • 38.###.67.144:23
  • 53.##.188.23:23
  • 20#.##.217.143:23
  • 95.##.45.159:23
  • 80.##.140.103:23
  • 65.###.183.16:23
  • 90.###.185.26:23
  • 67.###.29.254:23
  • 13#.##.184.120:23
  • 14#.##.117.17:23
  • 20#.##4.45.34:23
  • 4.###.22.135:23
  • 19#.##1.235.212:23
  • 53.###.187.51:23
  • 14#.##6.206.178:23
  • 11#.##4.28.190:23
  • 16#.##1.15.199:23
  • 18.##.198.89:23
  • 22#.##0.41.73:23
  • 80.###.135.201:23
  • 69.##.214.10:23
  • 15#.##1.64.245:23
  • 13#.##.58.240:23
  • 12#.##5.14.221:23
  • 36.##.23.193:23
  • 44.##1.8.231:23
  • 14.##2.2.102:23
  • 21#.##5.11.44:23
  • 87.##.199.225:23
  • 68.###.211.228:23
  • 17#.##.239.213:23
  • 13#.##1.174.151:23
  • 85.###.12.243:23
  • 12#.##4.195.77:23
  • 18#.##3.138.132:23
  • 15#.##.161.33:23
  • 19#.##0.94.164:23
  • 19#.##2.27.232:23
Receives data from the following servers:
  • 21#.##2.241.70:3074

Curing recommendations


Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

One month (no registration) or three months (registration and renewal discount)

Download Dr.Web

Download by serial number