Technical Information
Malicious functions:
Removes itself
Substitutes application name for:
- pabf3onf3eidj20b5g4o
Network activity:
Awaits incoming connections on ports:
- 127.0.0.1:48101
- 0.0.0.0:23
Establishes connection:
- 8.#.8.8:53
- 65.###.202.53:80
Attacks using a special dictionary (brute-force technique) via the Telnet protocol.
Sends data to the following servers:
- 16#.##3.135.30:2323
- 20#.###.244.129:2323
- 19#.###.182.145:2323
- 23.##.254.36:2323
- 57.##.111.5:2323
- 16#.###.104.180:2323
- 12#.##.243.43:2323
- 21#.##4.68.16:2323
- 15#.##6.37.2:2323
- 19#.##1.67.9:2323
- 16#.##.155.135:2323
- 20#.###.135.210:2323
- 10#.###.205.177:2323
- 76.###.155.162:2323
- 13#.##0.31.206:2323
- 16#.##.254.207:2323
- 9.###.178.11:2323
- 71.##.214.234:2323
- 19#.##.25.168:2323
- 19#.##0.39.240:2323
- 91.##.97.72:2323
- 1.##.10.34:2323
- 15#.##.12.77:2323
- 60.###.222.79:2323
- 11#.##.122.18:2323
- 18#.##.68.115:2323
- 81.###.48.227:2323
- 17#.##0.6.67:2323
- 12#.##8.15.159:2323
- 11#.##.247.123:2323
- 70.###.194.17:2323
- 90.##.147.93:2323
- 58.###.203.198:2323
- 50.###.88.248:2323
- 45.#.#20.85:2323
- 58.###.215.49:2323
- 59.###.149.100:2323
- 10#.##8.51.37:2323
- 79.###.40.182:2323
- 12#.##.105.1:2323
- 16#.##.36.206:2323
- 17#.#.83.239:2323
- 21#.##4.160.91:2323
- 4.#.##6.239:2323
- 12.###.154.150:2323
- 18.###.195.10:2323
- 11#.##7.72.195:2323
- 10#.###.135.219:2323
- 19#.##.163.118:2323
- 25.###.100.231:2323
- 17#.##.137.6:2323
- 12#.##2.11.191:2323
- 1.###.91.163:2323
- 74.##.161.62:2323
- 8.###.141.27:2323
- 18#.###.222.205:2323
- 16#.##3.53.140:2323
- 18#.##5.42.8:2323
- 11#.##.157.153:2323
- 11#.##3.96.100:2323
- 21#.##4.231.87:2323
- 15#.###.144.145:2323
- 15#.##0.82.194:2323
- 20#.##.124.61:2323
- 41.###.22.182:2323
- 17#.##.220.143:2323
- 14#.##7.30.208:2323
- 85.###.211.225:2323
- 16#.##.120.147:2323
- 51.##.69.65:2323
- 12.##.109.239:2323
- 12#.###.163.218:2323
- 19#.##.138.230:2323
- 15#.###.246.185:2323
- 15#.#.38.231:2323
- 41.###.173.202:2323
- 93.##.112.6:2323
- 59.##.231.47:2323
- 12#.##8.69.109:2323
- 23.###.61.81:2323
- 18#.##3.203.10:2323
- 52.###.100.235:2323
- 20#.##0.9.83:2323
- 22#.##.120.216:2323
- 63.##.2.31:2323
- 10#.##.81.1:2323
- 51.##.87.16:2323
- 16#.##5.5.109:2323
- 25.###.3.78:2323
- 17#.##6.11.71:2323
- 18#.##7.52.180:2323
- 15#.#.96.31:2323
- 70.###.155.156:2323
- 86.###.102.159:2323
- 20#.##4.61.254:2323
- 17#.###.171.240:2323
- 15#.##9.72.24:2323
- 27.###.190.115:2323
- 25.###.57.255:2323
- 21#.##1.178.57:2323
- 19#.##.49.87:2323
- 52.##.202.178:2323
- 44.##.105.32:2323
- 62.###.30.79:2323
- 43.###.10.219:2323
- 10#.##.53.124:2323
- 24.##.187.193:2323
- 42.###.193.213:2323
- 98.##.58.231:2323
- 16#.###.150.143:2323
- 37.###.216.43:2323
- 70.##.113.114:2323
- 13#.##.151.30:2323
- 17#.##.223.25:2323
- 88.###.149.109:2323
- 20#.##8.159.44:2323
- 21#.##.37.247:2323
- 20#.##9.178.41:2323
- 17#.##.54.79:2323
- 80.###.203.252:2323
- 18#.###.219.196:2323
- 49.###.102.95:2323
- 99.###.152.176:2323
- 22#.##.126.73:2323
- 17#.##9.42.147:2323
- 45.###.184.248:2323
- 20#.##9.160.83:2323
- 13#.##5.103.92:2323
- 18#.##.122.226:2323
- 41.###.209.186:2323
- 14#.##8.72.239:2323
- 43.###.57.58:2323
- 16#.##3.25.190:2323
- 11#.##.69.225:2323
- 20#.##0.19.178:2323
- 16#.###.101.107:2323
- 69.##.140.82:2323
- 94.##.103.175:2323
- 35.###.229.95:2323
- 19#.###.193.155:2323
- 2.##.#8.180:2323
- 4.#.#.11:2323
- 77.###.202.51:2323
- 73.###.172.25:2323
- 18#.##.180.135:2323
- 16#.##1.90.61:2323
- 15#.#.123.229:2323
- 11#.##.158.19:2323
- 23.##.240.84:2323
- 22#.##.80.210:2323
- 20#.#.112.20:2323
- 20#.##6.98.246:2323
- 21#.###.202.137:2323
- 20#.##7.79.130:2323
- 14#.##7.49.23:2323
- 57.###.101.202:2323
- 12#.###.252.120:2323
- 76.###.1.244:2323
- 12#.##6.158.9:2323
- 17.##.219.198:2323
- 14#.##6.59.18:2323
- 14#.##.80.111:2323
- 18#.###.165.101:2323
- 13#.##.9.250:2323
- 15#.##7.121.79:2323
- 20.###.181.131:2323
- 11#.###.222.184:2323
- 47.##.123.24:2323
- 79.###.152.253:2323
- 19#.##2.32.151:2323
- 21#.##.132.94:2323
- 61.##.66.123:2323
- 85.###.124.213:2323
- 73.#.#3.151:2323
- 60.#.#33.76:2323
- 12#.###.120.192:2323
- 40.###.110.244:2323
- 71.###.213.60:2323
- 27.##.251.206:2323
- 11#.##.117.29:2323
- 18#.##8.12.112:2323
- 10#.##.139.73:2323
- 5.###.133.254:2323
- 15#.###.164.254:2323
- 78.###.51.98:2323
- 22#.##.108.179:2323
- 19#.##9.90.87:2323
- 15#.###.208.158:2323
- 20#.##.31.51:2323
- 14#.###.230.211:2323
- 63.##.195.66:2323
- 48.###.255.187:2323
- 65.###.202.53:80
- 1.##.#2.214:2323
- 75.###.239.23:2323
- 76.###.242.10:2323
- 20#.##1.84.186:2323
- 19#.##3.67.59:2323
- 10#.###.246.118:2323
- 63.###.41.52:2323
- 45.###.217.220:2323
- 4.###.139.123:2323
- 51.###.50.46:2323
- 15#.##3.42.66:2323
- 62.###.75.94:2323
- 5.#.#9.201:2323
- 13#.##7.105.40:2323
- 12#.##.170.148:2323
- 60.###.196.95:2323
- 17#.##.34.38:2323
- 16#.##1.202.177:23
- 18#.#.97.254:2323
- 35.###.80.111:23
- 13#.##0.163.71:2323
- 67.#.38.210:23
- 42.##.215.220:2323
- 40.##8.66.47:23
- 13#.##6.75.6:2323
- 9.##.192.96:23
- 4.###.209.237:2323
- 50.##4.45.3:23
- 20#.##.84.90:2323
- 66.##.65.237:23
- 24.###.235.163:2323
- 36.###.96.161:23
- 10#.##5.8.183:2323
- 15#.##.18.133:23
- 24.##.69.253:2323
- 47.##.77.2:23
- 97.###.232.228:2323
- 10#.##0.131.50:23
- 94.##.243.165:2323
- 10#.##.139.230:23
- 18#.##.9.105:2323
- 17#.##0.96.201:23
- 61.###.210.133:2323
- 17#.#.208.124:23
- 36.##.124.101:2323
- 16#.#7.17.51:23
- 72.###.152.132:2323
- 49.###.197.66:23
