Technical Information
Malicious functions:
Removes itself
Launches itself as a daemon
Substitutes application name for:
- vi9i0pifkik0
Network activity:
Awaits incoming connections on ports:
- 127.0.0.1:8888
Establishes connection:
- 8.#.8.8:53
- 5.###.227.65:6593
Sends data to the following servers:
- 63.###.105.60:8000
- 70.##.94.19:80
- 96.###.37.178:88
- 40.##5.204.4:88
- 33.##.224.94:8000
- 11#.##.122.149:8000
- 19#.###.105.186:8080
- 17#.##1.246.16:80
- 18#.##5.82.141:88
- 30.###.144.86:88
- 54.##.218.55:88
- 21#.###.176.177:8000
- 18.###.109.131:8080
- 57.##.232.240:8080
- 19#.###.244.225:8000
- 23.##.75.247:8080
- 5.###.227.65:6593
- 20#.##2.39.47:8000
- 77.###.97.172:81
- 79.##.29.187:80
- 22#.##.145.237:81
- 11#.##1.101.50:88
- 16#.##.86.165:8000
- 18#.##5.171.225:81
- 23.##.178.161:81
- 20#.##0.200.47:88
- 22#.###.178.102:8080
- 11#.##.167.159:8000
- 12#.##3.181.84:81
- 45.##.45.180:80
- 12#.##4.80.180:8000
- 12#.##5.24.60:80
- 51.##.67.143:81
- 25#.##8.45.77:88
- 26.###.27.179:81
- 17#.##.175.168:80
- 22#.##.167.222:88
- 10#.###.197.212:8080
- 11#.##.51.130:80
- 24#.#8.24.13:81
- 20#.##7.126.84:8080
- 22#.###.214.179:8000
- 13#.##.23.166:8080
- 1.##.95.199:80
- 21#.##6.93.44:8080
- 51.##1.155.0:88
- 58.###.246.106:80
- 97.##.211.254:80
- 13#.###.220.237:8080
- 18#.##2.104.162:88
- 11#.##.179.14:80
- 93.###.216.194:80
- 15#.##8.64.217:88
- 16#.###.244.167:8000
- 10.##.98.219:8080
- 16#.##3.35.252:8000
- 72.##1.84.70:80
- 22#.##.142.229:80
- 19#.##.11.154:81
- 36.###.237.94:8000
- 20#.##4.40.228:8000
- 69.#.230.63:81
- 22#.##.129.198:88
- 10#.##3.65.111:88
- 14#.##7.176.44:81
- 22#.##3.194.18:81
- 21#.##2.195.7:8080
- 15#.##.19.212:8080
- 86.###.168.90:81
- 13#.##0.217.81:80
- 17.###.21.188:88
- 91.###.37.184:8080
- 20.###.40.137:80
- 11#.##4.113.33:81
- 71.###.10.139:8000
- 84.##3.187.2:88
- 67.###.252.152:80
- 15#.#.102.7:88
- 31.###.185.141:8080
- 11#.##.229.135:8080
- 18#.##6.37.225:81
- 13#.##.15.152:80
- 15#.##.78.151:88
- 93.###.211.70:81
- 10#.##2.23.93:88
- 24#.##3.116.190:88
- 77.##.128.43:81
- 19#.##8.224.240:88
- 19#.##2.232.201:80
- 9.###.135.221:80
- 69.###.30.217:8080
- 15.###.191.172:81
- 18#.##2.110.22:80
- 13#.##1.174.91:81
- 12#.##9.72.19:88
- 61.###.93.185:88
- 61.##3.37.77:88
- 14#.##0.0.201:8000
- 13#.##8.13.226:80
- 15#.##.252.11:81
- 15#.##2.14.190:81
- 18#.##.118.107:81
- 23#.##5.2.215:81
- 27.##1.1.120:81
- 24#.##.159.139:80
- 33.###.144.84:8080
- 59.###.212.179:88
- 11.###.73.172:81
- 21#.#22.0.18:88
- 41.###.171.145:8000
- 38.###.168.145:8000
- 17#.###.136.215:8080
- 69.##.50.140:8000
- 11#.#0.72.45:81
- 3.###.233.137:80
- 15#.###.239.245:8080
- 21#.#2.20.69:88
- 12#.##8.111.75:88
- 30.##.228.148:81
- 15#.##.201.92:81
- 17#.#.126.62:8000
- 8.###.252.213:8000
- 28.##.195.129:81
- 85.##.81.225:81
- 17#.##9.189.61:88
- 35.###.30.175:8000
- 10.##.31.79:8080
- 18#.##3.216.188:88
- 20#.#.72.203:81
- 10#.##0.11.29:88
- 68.##.213.32:88
- 31.###.115.189:8080
- 21#.##.198.57:88
- 25#.##7.222.5:8080
- 9.###.204.108:88
- 19#.##3.27.20:8080
- 21#.##9.165.16:80
- 22#.##.183.74:80
- 19.#.184.2:81
- 19#.##.252.74:88
- 20#.##.126.79:8080
- 23#.##4.217.35:88
- 98.###.189.235:8000
- 79.###.166.19:88
- 20#.##.205.189:88
- 45.##.138.68:81
- 11#.#7.85.70:81
- 44.###.130.222:81
- 19#.##0.22.119:80
- 13#.##7.59.14:88
- 18#.##4.149.16:81
- 23#.###.127.117:8080
- 24#.#.168.100:8080
- 37.###.242.165:88
- 12#.###.216.106:8080
- 14#.##3.56.228:8080
- 22#.##8.76.154:88
- 17#.##3.13.29:81
- 24#.##5.156.44:80
- 10.###.188.29:81
- 21#.##4.142.86:8080
