Linux.Siggen.7514

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

Network activity:

Awaits incoming connections on ports:

127.0.0.1:33337

Establishes connection:

8.#.8.8:53
19#.##.28.148:33335

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

Sends data to the following servers:

10#.##0.115.157:23
21#.##2.95.103:23
81.###.116.182:23
19#.##.28.148:33335
74.##1.75.65:23
73.###.252.245:23
15#.##5.150.34:23
13#.##9.92.178:23
19#.##5.52.76:23
14#.##7.4.178:23
17.###.165.114:23
12#.##.93.197:23
14#.##9.156.133:23
12#.##.213.159:23
15#.##4.15.243:23
88.##.255.72:23
6.###.89.123:23
22#.##.102.247:23
15.##.108.155:23
13#.##7.60.238:23
24#.##0.229.207:23
13.##.70.51:23
19#.##1.205.19:23
81.##.237.209:23
22#.##0.56.46:23
24#.##3.131.36:23
18#.##.206.46:23
22#.##3.112.83:23
13#.##2.169.154:23
18#.##0.115.75:23
11#.##3.143.147:23
38.###.250.95:23
18#.#9.164.3:23
62.###.13.156:23
50.###.86.129:23
2.###.130.47:23
17#.##9.92.54:23
17#.##0.59.91:23
18#.##8.147.158:23
48.##.142.180:23
12.##2.70.74:23
15#.##7.128.245:23
33.##.69.66:23
22#.##0.116.54:23
22#.##.100.168:23
18#.##3.205.243:23
2.###.49.155:23
14#.##7.239.31:23
54.###.200.149:23
23#.##8.82.27:23
28.##5.17.56:23
29.##.207.237:23
24#.##.234.157:23
13#.##2.180.124:23
87.#.237.31:23
23#.##6.78.10:23
13#.##2.21.91:23
25.##.67.48:23
19#.#.107.241:23
11#.##3.27.216:23
60.##1.38.70:23
23.###.116.23:23
10#.#6.80.21:23
10#.##2.85.82:23
14#.##6.19.235:23
21.##.131.250:23
17#.##.107.191:23
76.##1.98.58:23
28.###.112.181:23
91.##.24.78:23
17#.##7.51.19:23
38.##.36.39:23
23#.##1.94.194:23
21#.##1.77.26:23
82.###.148.213:23
14#.##.166.59:23
6.###.132.62:23
20#.##.206.198:23
18#.##6.113.180:23
24#.##0.212.93:23
13.###.117.128:23
20#.##6.252.214:23
77.##.253.169:23
25#.##5.5.242:23
25#.##3.124.83:23
20#.##6.89.143:23
18#.##.78.255:23
24#.##2.12.102:23
18#.##.95.190:23
18#.##4.101.92:23
20#.##.33.213:23
10#.##7.246.196:23
71.###.147.12:23
23#.##2.219.221:23
17#.#06.0.13:23
17#.##4.11.68:23
21#.##.151.17:23
12.###.52.122:23
89.###.72.249:23
97.##.165.144:23
84.##6.13.27:23
10#.##2.20.213:23
49.###.87.207:23
19#.##8.141.200:23
22.##2.177.3:23
42.##.182.203:23
21.##.176.61:23
21.##.200.60:23
24#.##5.151.220:23
40.##.185.219:23
12#.##.104.83:23
41.###.225.110:23
22#.##5.206.9:23
67.##.122.24:23
19#.##9.223.135:23
57.###.75.186:23
24#.##4.20.155:23
11#.#7.56.88:23
70.###.207.228:23
51.###.196.14:23
12#.##.78.231:23
17#.##0.36.216:23
11#.##9.236.16:23
14#.##1.79.179:23
87.###.93.113:23
17#.##4.63.243:23
82.##.90.58:23
7.##.44.31:23
11#.##0.255.74:23
20#.##7.100.77:23
14#.##6.103.73:23
15#.##.155.95:23
15#.##7.235.160:23
12#.##.214.88:23
17#.##0.208.246:23
10#.##5.238.180:23
42.###.156.154:23
82.##.89.192:23
60.##.143.25:23
19#.##1.63.100:23
11.###.221.58:23
82.##.241.227:23
22#.##4.212.70:23
78.#.108.26:23
40.##.175.4:23
15#.##1.173.179:23
20#.##4.38.218:23
14#.##.242.199:23
17#.##0.126.220:23
52.###.204.15:23
17#.##3.36.89:23
25#.##5.143.244:23
11#.##0.227.121:23
75.##.145.64:23
11#.##7.29.134:23
22#.##.53.242:23
17#.##3.4.140:23
70.##.114.241:23
31.###.148.136:23
11#.#2.89.53:23
20.##4.109.0:23
13#.##5.213.188:23
77.##.247.238:23
10#.#.213.56:23
37.##6.81.87:23
22#.##.224.135:23
20#.##9.226.14:23
22.###.228.233:23
2.##.226.118:23
11#.##.68.108:23
90.##0.7.222:23
25#.##.149.34:23
4.#.#26.229:23
11.###.251.188:23
16#.##.113.253:23
88.##5.2.112:23
36.##3.62.62:23
24#.##7.47.253:23
15#.##0.229.91:23
23#.##7.66.194:23
14#.##7.171.241:23
18#.##3.138.252:23
36.###.149.62:23
22#.##1.87.47:23
35.###.122.111:23
14#.#.99.40:23
88.##.131.20:23
18#.##.175.65:23
95.##2.88.67:23
13.###.201.76:23
61.###.108.230:23
1.#.#1.160:23
5.##.130.74:23
12#.##9.202.97:23
4.###.193.176:23
85.##.214.19:23
58.###.58.222:23
99.##.117.253:23
23#.##.10.215:23
19#.#.202.91:23
14#.##5.243.20:23
20#.##8.224.217:23
14#.##2.2.206:23
17#.##.133.165:23
14.###.115.150:23
44.#.62.47:23
18#.##6.178.5:23
15#.##9.112.110:23
11#.##2.225.145:23
17#.##.151.12:23
10#.##.187.184:23
10#.##5.130.216:23
13#.##.146.134:23
22#.##3.69.76:23
11#.##.214.33:23
18#.##5.33.212:23
22#.##7.166.83:23
28.###.73.122:23
22#.##4.133.28:23
16#.##6.155.251:23
13#.##7.67.82:23
95.##5.111.4:23
43.##.85.63:23
12#.#5.0.67:23
15#.##6.19.19:23
14#.#2.83.22:23
79.###.237.142:23
24#.##7.242.165:23
18#.##.58.155:23
22#.##0.255.90:23
24#.##9.157.247:23
79.###.237.89:23
6.##.228.98:23
13#.##5.239.141:23
79.###.87.219:23
18#.##2.100.54:23
96.###.155.21:23
39.##.229.236:23
14#.##2.39.192:23
58.###.45.200:23
18#.##0.206.179:23
16#.##1.194.243:23
16#.##0.146.235:23
33.###.82.212:23
17#.#7.5.253:23
14#.#.201.91:23
23#.##.166.102:23
60.###.149.199:23
65.###.67.240:23
19#.##3.1.208:23
90.##.228.235:23
20#.##.146.251:23
17.###.227.108:23
15#.##9.176.186:23
72.##.61.75:23
23#.##2.178.12:23
14#.##4.171.37:23
94.###.198.20:23
20#.##.97.209:23
11#.##0.91.35:23
25.###.12.114:23
85.###.85.110:23
17#.#7.31.77:23
99.##1.57.29:23
21#.##8.128.132:23
10#.##2.93.232:23
14#.##.31.101:23
14#.##.85.170:23
16.###.249.144:23
25#.#3.41.65:23
13#.##9.155.33:23
25#.##.27.121:23
22#.##7.103.86:23
82.##7.52.34:23
13#.##4.178.151:23
21#.##.229.159:23
19#.##.119.117:23
15#.##.240.170:23
18#.##1.184.17:23
6.###.114.200:23
99.###.249.44:23
9.##.39.238:23
54.###.155.47:23
33.###.50.206:23
39.#.196.58:23
80.##2.7.107:23
24#.#9.70.91:23
16#.##6.197.159:23
24#.#3.84.56:23
98.##.32.124:23
23#.##.96.141:23
54.###.103.181:23
20#.##6.106.189:23
19#.##.249.224:23
12#.##2.1.255:23
75.##.211.89:23
14#.##.220.34:23
24#.##1.133.126:23
20#.##1.81.24:23
12#.##3.244.154:23
7.##.226.12:23
19#.##6.119.151:23
24#.##4.82.214:23
15#.##9.103.121:23
7.###.101.31:23
20#.##.10.113:23
23#.##3.197.25:23
24#.##2.160.50:23
22#.##3.191.189:23
12#.##9.248.162:23
10#.##0.201.127:23

Receives data from the following servers:

19#.##.28.148:33335

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations