Technical Information
Malicious functions:
Launches itself as a daemon
Kills system processes:
- sshd
Kills the following processes:
- systemd
Network activity:
Awaits incoming connections on ports:
- 0.0.0.0:8235
Establishes connection:
- 8.#.8.8:53
- 45.##.196.75:4859
Attacks using a special dictionary (brute-force technique) via the Telnet protocol.
Sends data to the following servers:
- 45.##.196.75:4859
- 30.###.142.170:23
- 89.###.141.36:23
- 97.###.191.249:23
- 20#.##1.226.90:23
- 15#.##3.113.187:23
- 10#.##.41.219:23
- 36.##.172.109:23
- 12#.##7.27.131:23
- 11#.##0.237.82:23
- 22#.##4.248.73:23
- 10#.#2.75.68:23
- 37.###.107.200:23
- 21#.##7.170.108:23
- 17#.##9.156.215:23
- 17#.##2.208.147:23
- 24#.##.217.235:23
- 16#.##2.154.78:23
- 21#.##.167.45:23
- 22#.##5.113.64:23
- 15#.##8.137.126:23
- 86.###.218.141:23
- 20#.##0.207.232:23
- 16#.##8.91.139:23
- 32.###.173.55:23
- 72.##.173.211:23
- 74.##.21.217:23
- 69.##8.90.78:23
- 12#.##7.124.56:23
- 21#.##.23.195:23
- 4.###.121.35:23
- 16#.##5.51.64:23
- 68.##3.73.16:23
- 17#.##3.103.51:23
- 56.##4.2.39:23
- 12#.#0.1.129:23
- 18#.##9.248.18:23
- 90.###.181.202:23
- 11#.##.130.44:23
- 7.###.102.41:23
- 19#.##.166.84:23
- 24#.##.134.157:23
- 76.###.17.255:23
- 21#.##.151.64:23
- 14#.##9.64.148:23
- 13#.##.198.56:23
- 5.###.78.77:23
- 21#.##.128.108:23
- 95.#.170.147:23
- 10#.##0.162.60:23
- 95.##1.57.7:23
- 84.###.192.46:23
- 16#.##7.105.97:23
- 47.##.117.172:23
- 20#.##.155.224:23
- 29.##.161.1:23
- 14#.##1.25.90:23
- 7.##.221.53:23
- 18#.##1.131.171:23
- 11#.##5.89.110:23
- 11#.##7.88.211:23
- 13#.##1.181.250:23
- 11.###.152.153:23
- 24#.##2.131.22:23
- 77.##2.84.71:23
- 71.##7.73.72:23
- 14#.##9.125.119:23
- 15#.#3.80.3:23
- 13#.##.187.14:23
- 24#.##9.69.246:23
- 14#.##3.50.160:23
- 26.##.40.105:23
- 19#.#43.82.9:23
- 14#.##.178.87:23
- 94.##.61.81:23
- 12#.##.202.232:23
- 14#.##1.208.163:23
- 24#.#15.9.81:23
- 22#.##4.129.247:23
- 63.###.204.244:23
- 20#.#1.30.93:23
- 8.###.254.196:23
- 20#.##7.152.160:23
- 23#.##8.145.4:23
- 13#.##.163.123:23
- 17#.##9.100.69:23
- 15#.##8.243.171:23
- 21#.##3.129.26:23
- 19#.##.172.240:23
- 22#.#4.49.7:23
- 92.###.171.239:23
- 97.###.122.236:23
- 22#.##.142.35:23
- 78.###.15.185:23
- 24#.##3.69.108:23
- 10.###.70.102:23
- 93.##.206.85:23
- 24#.##.98.183:23
- 11#.#.234.207:23
- 36.##1.5.125:23
- 18#.##1.180.73:23
- 16#.##.113.79:23
- 19#.##6.244.115:23
- 16#.##0.121.151:23
- 63.##.107.101:23
- 13#.##5.193.209:23
- 33.##1.67.95:23
- 17#.##.165.59:23
- 10#.##.248.254:23
- 17#.##3.209.209:23
- 98.###.40.214:23
- 75.###.147.141:23
- 12.###.245.19:23
- 68.##2.8.110:23
- 20#.##8.218.229:23
- 21#.##2.55.176:23
- 14#.#8.83.88:23
- 13#.##1.107.147:23
- 14#.##.203.165:23
- 78.###.148.252:23
- 13#.##.68.151:23
- 63.###.189.19:23
- 30.###.165.152:23
- 38.##.108.142:23
- 34.###.199.80:23
- 16#.#1.48.30:23
- 8.##.219.120:23
- 62.###.188.121:23
- 22#.##5.21.49:23
- 9.###.70.123:23
- 15#.##.190.16:23
- 16#.##9.76.157:23
- 10#.##8.87.213:23
- 78.##8.5.33:23
- 23#.##4.102.142:23
- 44.##.112.197:23
- 16#.##.238.31:23
- 58.###.127.139:23
- 22.#.119.65:23
- 46.###.228.236:23
- 51.#.71.16:23
- 10#.##8.13.106:23
- 13#.##9.83.17:23
- 2.###.236.197:23
- 25.##.225.61:23
- 11#.##0.39.242:23
- 63.##.107.117:23
- 12#.##9.194.31:23
- 67.##.238.51:23
- 72.##3.55.26:23
- 11#.##7.42.59:23
- 22.###.234.155:23
- 39.##.51.155:23
- 95.#.124.153:23
- 24#.##.38.160:23
- 11.##.64.10:23
- 66.##.235.250:23
- 15#.##8.100.90:23
- 18#.##.53.142:23
- 25#.##4.226.110:23
- 20#.##9.17.130:23
- 9.###.166.116:23
- 14#.##3.152.253:23
- 43.###.196.58:23
- 40.###.231.93:23
- 19#.#9.1.60:23
- 13.##.143.125:23
- 12.##.203.249:23
- 43.##9.38.4:23
- 42.##6.38.22:23
- 14#.##7.171.194:23
- 21#.##.199.41:23
- 58.###.131.234:23
- 20#.##3.72.52:23
- 32.##.88.144:23
- 24#.#.34.206:23
- 59.##.5.182:23
- 13#.##3.7.171:23
- 30.##.70.180:23
- 13#.##.42.199:23
- 91.###.134.34:23
- 69.##0.49.26:23
- 22#.##6.109.230:23
- 16#.##.38.202:23
- 54.##.80.147:23
- 19#.##.62.206:23
- 22#.##.236.200:23
- 44.###.236.96:23
- 44.###.123.41:23
- 34.##.252.26:23
- 21#.##2.5.178:23
- 23#.##.245.197:23
- 70.##.108.228:23
- 23#.##.200.47:23
- 17#.##.165.160:23
- 23#.##.132.31:23
- 19#.##1.42.52:23
- 30.###.105.204:23
- 64.##.54.210:23
- 55.###.75.231:23
- 20#.##.73.169:23
- 21#.##8.200.115:23
- 13#.##2.102.80:23
- 21#.##.141.166:23
- 15#.##3.190.45:23
- 6.###.229.171:23
- 3.##.204.175:23
- 17#.##9.42.100:23
- 22#.##2.251.119:23
- 11#.##.109.20:23
- 17#.##.33.205:23
- 1.###.161.15:23
- 12.##3.75.69:23
- 13#.##9.38.108:23
- 23#.##8.124.164:23
- 48.###.154.22:23
- 24#.##6.140.48:23
- 23#.##.110.35:23
- 19#.##.147.32:23
- 19#.##1.12.254:23
- 17#.#7.107.6:23
- 25#.#6.22.80:23
- 15#.##6.203.116:23
- 30.###.54.181:23
- 82.###.12.150:23
- 49.#.80.217:23
- 18#.##5.58.198:23
- 23#.##4.175.114:23
- 23#.##1.89.135:23
- 12#.##0.149.144:23
- 30.##.235.122:23
- 17#.#1.175.9:23
- 17#.##.61.163:23
- 60.##2.72.57:23
- 12.###.149.44:23
- 20#.##6.27.29:23
- 12#.##0.183.22:23
- 99.##1.39.29:23
- 10#.##6.188.78:23
- 12#.##8.251.35:23
- 18#.##.41.143:23
- 24#.##.145.182:23
- 84.###.157.143:23
- 35.###.46.113:23
- 18#.##2.210.31:23
- 14#.##4.112.245:23
- 75.##.155.201:23
- 22#.##1.114.119:23
- 21#.##.134.235:23
- 11#.##0.109.129:23
- 22#.##.250.193:23
- 67.###.53.152:23
- 25#.##.49.102:23
- 19#.##2.37.153:23
- 12#.##4.196.37:23
- 44.###.133.82:23
- 40.##.208.123:23
- 72.##1.85.70:23
- 20.##.83.39:23
- 46.###.222.138:23
- 23#.##3.107.143:23
- 15#.##7.104.17:23
- 20#.#2.6.254:23
- 14#.##6.193.80:23
- 12#.##7.174.59:23
- 14#.##6.145.70:23
- 17#.#0.63.76:23
- 22#.##.250.127:23
- 64.###.179.175:23
- 25#.##4.174.124:23
- 10#.##.124.153:23
- 2.###.57.243:23
- 18#.##3.15.13:23
- 19#.##.169.53:23
- 42.##.203.135:23
- 17#.##.163.232:23
- 19.###.55.255:23
- 92.###.171.10:23
- 13#.##5.240.61:23
- 21#.##5.43.119:23
- 13#.##9.82.50:23
- 18#.##.172.10:23
- 16.##.62.86:23
- 17#.##5.177.135:23
- 8.##.224.246:23
- 18#.##.199.106:23
- 18#.##.207.24:23
- 46.#.66.208:23
- 21#.##1.230.9:23
- 25#.##.196.41:23
- 65.###.157.93:23
- 21.###.89.127:23
- 19#.##8.45.235:23
- 42.##9.37.21:23
- 52.###.87.108:23
- 63.##.244.48:23
- 37.##.124.17:23
- 18#.##8.120.223:23
- 15#.##0.138.89:23
- 20#.##.37.100:23
- 18#.##4.183.22:23
- 71.###.34.164:23
- 25#.##9.82.179:23
- 8.###.108.232:23
- 94.##.85.120:23
- 20#.##5.128.89:23
- 11#.##1.156.179:23
- 14#.#9.72.24:23
- 17#.##.134.189:23
- 17#.##.161.115:23
- 25#.##8.53.117:23
- 10#.##6.216.44:23
- 13#.##.142.227:23
- 88.###.229.105:23
- 16#.##.71.246:23
- 18#.##.114.123:23
- 23#.##1.58.65:23
- 13#.#2.243.9:23
- 21#.##9.48.133:23
- 92.###.208.11:23
- 72.##.40.16:23
- 13#.##4.79.102:23
- 74.###.131.52:23
- 16#.##.235.239:23
- 27.##.58.73:23
- 21#.##7.234.11:23
- 79.###.27.147:23
- 20#.##2.43.62:23
- 13#.##7.99.237:23
- 16#.##1.23.172:23
- 22#.##1.223.249:23
- 14#.##7.131.7:23
- 14#.##.234.79:23
- 24#.#5.13.14:23
- 39.###.210.235:23
- 23#.##9.172.132:23
- 21.##.17.29:23
- 18#.##3.163.111:23
- 23#.##8.240.198:23
- 12#.#4.7.153:23
- 81.###.44.151:23
- 24#.##1.75.76:23
- 74.###.160.152:23
- 15#.##7.26.166:23
- 16#.##2.106.239:23
- 19#.##.152.243:23
- 5.##.18.43:23
- 25#.##.111.201:23
- 38.##.32.191:23
- 18#.##2.192.55:23
- 27.###.205.87:23
- 21#.##.45.137:23
- 57.##.250.210:23
- 45.###.137.55:23
- 22#.##2.202.191:23
- 12#.##7.35.180:23
- 12.###.60.157:23
- 50.###.86.100:23
- 16#.##3.116.49:23
- 10#.##5.250.173:23
- 12#.##7.166.169:23
- 56.##.40.218:23
- 6.##.62.97:23
- 13#.##5.119.91:23
- 11#.##2.64.27:23
- 18#.##7.102.188:23
- 20#.#.237.31:23
- 9.###.146.153:23
- 11#.##.42.156:23
- 18#.#6.77.79:23
- 99.##9.37.95:23
- 53.###.253.23:23
- 14#.##.161.162:23
- 20#.##5.110.157:23
- 49.###.216.212:23
- 20#.##1.196.122:23
- 95.##.245.5:23
- 91.###.241.155:23
- 19#.#7.32.87:23
- 75.###.126.119:23
- 23#.##.150.89:23
- 83.##.213.131:23
- 79.###.134.101:23
- 15#.##4.109.194:23
- 69.###.182.23:23
- 19#.##2.149.243:23
- 16.###.150.102:23
- 12#.##.18.196:23
- 92.###.242.146:23
- 21#.##.145.226:23
- 25#.##2.85.187:23
- 83.###.55.103:23
- 46.##.216.253:23
- 11#.##4.113.15:23
- 22.###.72.255:23
- 75.##4.73.81:23
- 18#.##0.178.90:23
- 18.##9.25.92:23
- 24#.##.38.235:23
- 10#.##.166.132:23
- 74.###.131.245:23
- 11#.#3.3.206:23
- 19#.##.93.226:23
- 58.###.29.228:23
- 69.###.168.44:23
- 30.##.6.94:23
- 29.##.23.116:23
- 11#.##3.208.157:23
- 16#.##4.173.215:23
- 10#.##8.165.48:23
- 25#.##4.41.39:23
- 17.###.119.101:23
- 12#.##5.145.208:23
- 39.##.53.207:23
- 38.##.244.44:23
- 25#.##3.74.142:23
- 1.###.148.103:23
- 24#.#9.77.86:23
- 87.###.48.132:23
- 35.##.112.243:23
- 16#.##.135.73:23
- 37.##.118.116:23
- 11#.##.132.187:23
- 94.##.199.150:23
- 95.##.197.127:23
- 22#.##2.123.14:23
- 23#.##6.127.126:23
- 63.#.194.186:23
- 11#.#9.75.64:23
- 46.##.178.231:23
- 10#.##2.122.61:23
- 17#.##3.100.102:23
- 24#.##9.170.88:23
- 83.###.126.187:23
- 10#.##1.72.254:23
- 54.##.59.132:23
- 60.##.54.107:23
- 16#.#3.46.47:23
- 26.##.56.131:23
- 13#.##2.170.239:23
- 79.###.164.127:23
- 95.###.140.84:23
- 80.##.29.81:23
- 62.###.112.241:23
- 12#.##9.54.64:23
- 67.##8.72.89:23
- 40.##.71.137:23
- 25.##.16.8:23
- 21#.##8.89.15:23
- 18#.##1.204.196:23
- 67.##2.99.11:23
- 13#.#0.53.64:23
- 22#.#9.51.83:23
- 82.###.54.101:23
- 11.##1.8.166:23
- 67.##.222.234:23
- 24.##.223.108:23
- 19#.##.89.163:23
- 19#.##6.196.50:23
- 13.##8.9.229:23
- 19#.##.48.249:23
- 17#.##.255.73:23
- 13#.##.52.207:23
- 19#.##7.228.157:23
- 13#.##2.179.217:23
- 23.###.158.146:23
- 11#.##2.62.119:23
- 11#.##3.186.116:23
- 19#.##4.205.69:23
- 19#.##5.170.148:23
- 14#.##5.11.130:23
- 6.#.#15.102:23
- 18#.##3.17.222:23
- 14#.##7.113.147:23
- 16.###.215.98:23
- 6.##.159.209:23
- 10#.##2.222.88:23
- 24#.##.177.236:23
- 20#.##0.40.90:23
- 88.##.17.60:23
- 17#.##9.217.74:23
- 21#.##7.158.63:23
- 82.###.146.175:23
- 10.##.61.16:23
- 19#.##.207.161:23
- 66.###.138.187:23
- 72.###.226.142:23
- 18#.##1.170.64:23
- 16#.##8.129.18:23
- 24#.#9.15.17:23
- 18#.##.115.41:23
- 56.#.67.223:23
- 17#.##0.152.197:23
- 87.##6.97.10:23
- 22#.##4.72.129:23
- 7.###.64.58:23
- 23#.##3.121.206:23
- 18#.##2.117.192:23
- 40.##3.6.193:23
- 11.###.165.244:23
- 15#.##2.139.120:23
- 18.###.68.196:23
- 50.##.219.41:23
- 2.###.104.72:23
- 96.###.104.208:23
- 16#.##9.151.162:23
- 15#.#.88.187:23
- 10#.##2.219.143:23
- 20#.#9.48.22:23
- 96.###.133.156:23
- 84.##.102.181:23
- 10.###.103.236:23
- 74.###.136.74:23
- 28.###.50.204:23
- 60.#.8.225:23
- 6.###.64.209:23
- 24#.##9.123.35:23
- 84.##.214.221:23
- 20#.##1.77.255:23
- 91.##.86.114:23
- 60.###.114.215:23
- 13#.##.107.196:23
- 39.##.143.216:23
- 12#.##9.21.129:23
- 22#.##4.232.191:23
- 19#.##.105.236:23
- 41.##3.3.73:23
- 24#.#4.83.98:23
- 11#.##.20.249:23
- 68.##.71.127:23
- 78.###.50.117:23
- 17#.##3.206.104:23
- 12#.##.174.53:23
- 52.###.192.25:23
- 75.##.204.154:23
- 4.###.124.51:23
- 23#.##.14.150:23
- 12#.##1.241.87:23
- 18#.##.59.221:23
- 23#.##0.240.25:23
- 33.##3.87.1:23
- 19#.##8.39.29:23
- 8.##.91.237:23
- 37.##2.57.68:23
- 76.###.226.61:23
- 16#.##.249.39:23
- 17#.##1.142.107:23
- 41.###.226.53:23
- 16#.##.243.153:23
- 22#.##3.23.219:23
- 11#.##8.132.162:23
- 64.###.245.16:23
- 14.##.122.21:23
- 70.###.47.155:23
- 22#.##4.159.63:23
- 21.###.198.15:23
- 22#.##7.182.178:23
- 16#.##.188.80:23
- 21#.##9.144.105:23
- 83.##.28.241:23
- 16#.##3.245.229:23
- 44.###.203.97:23
- 16#.##0.69.227:23
- 10#.##.37.120:23
- 15#.##.20.187:23
- 60.##.250.49:23
- 45.##.240.119:23
- 92.###.202.32:23
- 94.##.57.2:23
- 23#.##8.31.254:23
- 12#.##.90.116:23
- 12#.##0.41.232:23
- 24#.##3.12.63:23
- 22.##.69.78:23
- 80.##.118.110:23
- 15#.##.118.244:23
- 96.##1.190.8:23
- 78.###.122.216:23
- 12.##.172.207:23
- 15#.##9.168.19:23
- 23#.#09.4.96:23
- 36.##.184.97:23
- 14#.##.171.137:23
- 10#.##6.37.25:23
- 13.##.158.181:23
- 14#.##1.93.16:23
- 49.##.124.232:23
- 32.##.86.74:23
- 16#.##5.55.74:23
- 13#.##2.222.34:23
- 18.##.47.110:23
- 17#.##5.201.165:23
- 23#.##2.88.188:23
- 25#.##2.241.50:23
- 46.###.52.139:23
- 22#.##1.248.139:23
- 11#.##7.152.62:23
- 19#.##9.216.30:23
- 75.###.238.60:23
- 13#.##0.65.187:23
- 13#.##5.234.3:23
- 17#.##1.42.74:23
- 17#.##7.195.11:23
- 28.##9.55.10:23
- 15#.#1.53.96:23
- 10#.##7.210.86:23
- 13#.##.212.52:23
- 24#.##.139.186:23
- 18#.##.11.238:23
- 14#.##6.211.66:23
- 15#.##1.163.104:23
- 65.##.51.148:23
- 16#.##9.184.170:23
- 20#.##5.33.89:23
- 5.###.85.215:23
- 14#.#.82.49:23
Receives data from the following servers:
- 45.##.196.75:4859
