Linux.Siggen.3211

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

/bin/busybox
/var/Kylin
[watchdog0]
-sh
[khelper]
[kworker]
/var/Sofia
[init]
/bin/login

Kills system processes:

sshd

Kills the following processes:

systemd-udevd
systemd-journal
dhclient
rpcbind
rpc.statd
rpc.idmapd
cron
atd
systemd-logind
dbus-daemon
exim4
bash
run.sh
kworker/u2:1

Network activity:

Awaits incoming connections on ports:

0.0.0.0:9234

Establishes connection:

8.#.8.8:53
45.##.168.86:56535
19#.###.125.149:8083
15#.##0.94.253:8083
45.##.168.86:44445

Sends data to the following servers:

19#.##.153.31:8083
19#.##6.167.31:8083
19#.##.48.233:8083
19#.##0.161.62:8083
19#.##.106.221:8083
19#.###.221.223:8083
19#.##4.74.210:8083
19#.##8.70.103:8083
19#.##.131.218:8083
19#.##.234.196:8083
19#.##.89.148:8083
45.##.168.86:56535
19#.##.40.240:8083
19#.##6.32.167:8083
19#.##9.2.69:8083
19#.##8.79.26:8083
19#.##5.132.17:8083
19#.##3.69.149:8083
19#.##.0.55:8083
19#.##3.29.60:8083
19#.##5.191.19:8083
19#.##4.200.34:8083
19#.##3.79.130:8083
19#.##.195.140:8083
19#.##.75.16:8083
19#.##.64.47:8083
19#.##0.217.45:8083
19#.##.153.237:8083
19#.##.52.136:8083
19#.##.36.78:8083
19#.###.166.228:8083
19#.##.243.47:8083
19#.##4.172.51:8083
19#.###.137.157:8083
19#.##.50.0:8083
19#.##0.74.13:8083
19#.##.212.202:8083
19#.##1.125.26:8083
19#.##4.161.19:8083
19#.##0.233.73:8083
19#.##4.93.16:8083
19#.##1.80.81:8083
19#.##.104.150:8083
19#.###.201.102:8083
19#.#.178.78:8083
19#.###.255.191:8083
19#.##2.52.176:8083
19#.#.51.184:8083
19#.##.88.20:8083
19#.##.150.79:8083
19#.##.220.226:8083
19#.##.193.16:8083
19#.##9.96.2:8083
19#.##8.4.115:8083
19#.##.12.15:8083
19#.###.134.188:8083
19#.##.77.95:8083
19#.#.45.244:8083
19#.#.14.185:8083
19#.##8.82.162:8083
19#.##.251.167:8083
19#.###.223.157:8083
19#.##.145.81:8083
19#.##.111.75:8083
19#.##.234.14:8083
19#.###.124.150:8083
19#.###.123.190:8083
19#.##0.237.24:8083
19#.###.212.116:8083
19#.##.5.214:8083
19#.##.255.106:8083
19#.##7.1.106:8083
19#.###.244.158:8083
19#.##3.68.174:8083
19#.##9.40.65:8083
19#.##.138.245:8083
19#.##.138.3:8083
19#.##.29.0:8083
19#.###.221.160:8083
19#.###.156.186:8083
19#.###.176.187:8083
19#.##3.179.88:8083
19#.##6.193.54:8083
19#.##.40.251:8083
19#.##.8.160:8083
19#.##.75.219:8083
19#.##.175.168:8083
19#.##.28.110:8083
19#.##5.54.215:8083
19#.##2.21.28:8083
19#.###.252.147:8083
19#.##4.78.98:8083
19#.##.192.219:8083
19#.##7.60.40:8083
19#.##.170.129:8083
19#.##5.90.126:8083
19#.##.78.187:8083
19#.##.166.154:8083
19#.##2.205.9:8083
19#.###.169.166:8083
19#.###.133.177:8083
19#.###.117.247:8083
19#.###.144.242:8083
19#.##4.75.92:8083
19#.##1.125.43:8083
19#.##.10.168:8083
19#.###.118.145:8083
19#.###.113.196:8083
19#.##.119.16:8083
19#.##1.195.97:8083
19#.###.125.149:8083
19#.##.179.236:8083
19#.###.190.124:8083
19#.##4.84.163:8083
19#.##.80.176:8083
19#.##8.72.72:8083
19#.##.228.37:8083
19#.##1.97.86:8083
19#.##.185.154:8083
19#.##.152.194:8083
19#.###.135.195:8083
19#.##2.238.29:8083
19#.###.196.108:8083
19#.##.88.101:8083
19#.##.70.144:8083
19#.##.43.246:8083
19#.##.245.212:8083
19#.##5.100.36:8083
19#.###.216.207:8083
19#.##0.89.150:8083
19#.##2.46.82:8083
19#.##8.221.76:8083
19#.##.169.171:8083
19#.###.104.147:8083
19#.##.40.22:8083
19#.##1.7.252:8083
19#.##.18.94:8083
19#.##.189.97:8083
19#.###.170.122:8083
19#.##.68.144:8083
19#.##1.181.91:8083
19#.#.155.204:8083
19#.###.146.199:8083
19#.##.92.196:8083
19#.##.153.10:8083
19#.##.129.61:8083
19#.##.70.114:8083
19#.##6.4.108:8083
19#.##2.140.62:8083
19#.##.255.33:8083
19#.##.18.78:8083
19#.##.253.77:8083
19#.##0.55.181:8083
19#.##.24.135:8083
19#.##2.87.211:8083
19#.##.179.148:8083
19#.##7.172.19:8083
19#.##.68.178:8083
19#.##.16.125:8083
19#.##.100.155:8083
19#.##4.92.252:8083
19#.##8.148.68:8083
19#.##6.164.69:8083
19#.###.243.209:8083
19#.###.134.188:8083
19#.##4.24.217:8083
19#.###.175.175:8083
19#.##8.167.87:8083
19#.##.67.161:8083
19#.##9.32.162:8083
19#.##3.245.97:8083
19#.#.112.193:8083
19#.##4.52.223:8083
19#.##.236.165:8083
19#.##.166.45:8083
19#.##1.131.57:8083
19#.###.100.145:8083
19#.###.139.157:8083
19#.##.89.100:8083
19#.##3.48.31:8083
19#.##.39.140:8083
19#.##4.187.35:8083
19#.###.161.132:8083
19#.##1.163.62:8083
19#.###.152.189:8083
19#.##0.27.87:8083
19#.##3.68.48:8083
19#.###.247.194:8083
19#.###.104.201:8083
19#.##.255.30:8083
19#.###.124.176:8083
19#.##2.87.8:8083
19#.##9.207.76:8083
19#.##.126.101:8083
19#.##6.88.196:8083
19#.##.70.228:8083
19#.##1.243.62:8083
19#.##4.19.169:8083
19#.###.186.107:8083
19#.###.234.143:8083
19#.##6.202.94:8083
19#.##2.173.65:8083
19#.##.7.244:8083
19#.##9.60.209:8083
19#.##.66.112:8083
19#.##6.35.20:8083
19#.##3.204.78:8083
19#.###.180.176:8083
19#.##.237.29:8083
19#.##.151.81:8083
19#.##1.134.81:8083
19#.##1.29.40:8083
19#.##.123.217:8083
19#.##6.102.90:8083
19#.##2.157.97:8083
19#.##7.197.84:8083
19#.###.144.237:8083
19#.##.190.178:8083
19#.##.168.228:8083
19#.##.157.237:8083
19#.##4.88.44:8083
19#.##.13.43:8083
19#.##.182.1:8083
19#.###.133.196:8083
19#.##6.241.88:8083
19#.###.234.175:8083
19#.###.191.170:8083
19#.###.208.177:8083
19#.##2.126.89:8083
19#.###.143.193:8083
19#.##.59.1:8083
19#.##.205.23:8083
19#.##.50.9:8083
19#.##.119.247:8083
19#.##1.89.101:8083
19#.##5.224.19:8083
19#.###.238.121:8083
19#.###.153.178:8083
19#.##.205.249:8083
19#.##2.184.4:8083
19#.##.180.249:8083
19#.##.210.8:8083
19#.###.200.248:8083
19#.###.194.108:8083
19#.##.2.172:8083
19#.##.77.160:8083
19#.##7.126.1:8083
19#.##2.122.32:8083
19#.###.108.150:8083
19#.##.137.215:8083
19#.###.228.179:8083
19#.###.103.133:8083
19#.##.224.21:8083
19#.##2.1.156:8083
19#.##.91.2:8083
19#.##7.93.156:8083
19#.##.130.247:8083
19#.##.78.184:8083
19#.##.121.167:8083
19#.##0.107.92:8083
19#.###.169.187:8083
19#.###.182.236:8083
19#.###.113.190:8083
19#.##.187.120:8083
19#.##8.28.205:8083
19#.##4.156.0:8083
19#.#.113.20:8083
19#.###.106.157:8083
19#.###.192.117:8083
19#.##.77.254:8083
19#.#.74.204:8083
19#.###.223.146:8083
19#.#.105.10:8083
19#.#.155.154:8083
19#.##.228.38:8083
19#.##5.0.140:8083
19#.##.30.201:8083
19#.##3.29.92:8083
19#.##0.19.111:8083
19#.##9.22.195:8083
19#.##0.89.131:8083
19#.##1.216.45:8083
19#.##.2.188:8083
19#.##3.30.96:8083
19#.###.134.235:8083
19#.###.118.119:8083
19#.##9.198.53:8083
19#.##.66.180:8083
15#.###.207.248:8083
15#.##2.149.29:8083
15#.##.157.154:8083
15#.##4.100.26:8083
15#.##1.91.148:8083
15#.##.96.112:8083
15#.##9.132.2:8083
15#.##2.21.235:8083
15#.##.153.103:8083
15#.##.197.126:8083
15#.##.12.23:8083
15#.##.8.196:8083
15#.###.139.222:8083
15#.##5.59.92:8083
15#.##0.94.253:8083
15#.##.247.50:8083
15#.##7.208.14:8083
15#.##.157.130:8083
15#.##1.5.162:8083
15#.##9.84.254:8083
15#.#.98.113:8083
15#.###.183.162:8083
15#.##9.0.248:8083
15#.###.143.156:8083
15#.###.104.230:8083
15#.##.33.0:8083
15#.##.87.116:8083
15#.##.117.119:8083
15#.###.129.115:8083
15#.##8.78.110:8083
15#.##9.130.43:8083
15#.###.122.110:8083
15#.##.60.149:8083
15#.##9.234.91:8083
15#.##0.67.40:8083
15#.##6.28.238:8083
15#.##.37.92:8083
15#.#.78.61:8083
15#.###.217.237:8083
15#.##.45.31:8083
15#.##9.27.198:8083
15#.##6.246.47:8083
15#.##9.44.57:8083
15#.###.236.243:8083
15#.#.10.155:8083
15#.##7.80.242:8083
15#.##.142.104:8083
15#.##7.32.151:8083
15#.##.209.215:8083
15#.##8.153.63:8083
15#.##.134.160:8083
15#.###.113.249:8083
15#.##4.153.78:8083
15#.##.20.123:8083
15#.##2.71.153:8083
15#.##.45.188:8083
15#.###.131.250:8083
15#.###.109.116:8083
15#.##9.74.96:8083
15#.##.156.20:8083
15#.##.4.145:8083
15#.##.252.238:8083
15#.###.174.151:8083
15#.##.136.188:8083
15#.##1.225.40:8083
15#.##4.82.35:8083
15#.##.225.4:8083
15#.##7.152.5:8083
15#.###.199.116:8083
15#.###.217.201:8083
15#.##.111.202:8083
15#.##7.139.21:8083
15#.###.131.184:8083
15#.##1.24.231:8083
15#.###.123.184:8083
15#.##4.90.34:8083
15#.##.240.55:8083
15#.##8.197.42:8083
15#.###.205.129:8083
15#.###.109.145:8083
15#.##.173.92:8083
15#.##.60.215:8083
15#.##0.254.35:8083
15#.##.84.110:8083
15#.###.142.224:8083
15#.##.3.135:8083
15#.##.140.21:8083
15#.###.224.151:8083
15#.##.244.238:8083
15#.##.230.143:8083
15#.##.136.223:8083
15#.##4.249.61:8083
15#.##9.61.87:8083
15#.##7.1.9:8083
15#.##.208.137:8083
15#.##8.127.2:8083
15#.###.189.209:8083
15#.##.92.59:8083
15#.##6.201.3:8083
15#.###.157.218:8083
15#.#.243.44:8083
15#.###.226.232:8083
15#.##.110.136:8083
15#.###.194.210:8083
15#.##.235.178:8083
15#.##2.149.60:8083
15#.##2.36.3:8083
15#.##1.164.27:8083
15#.##5.66.41:8083
15#.##0.187.30:8083
15#.###.210.159:8083
15#.##2.156.56:8083
15#.##.153.222:8083
15#.##1.4.138:8083
15#.##2.99.168:8083
15#.##4.5.187:8083
15#.##1.68.123:8083
15#.##0.145.9:8083
15#.##.53.81:8083
15#.##1.8.67:8083
15#.##.109.132:8083
15#.###.137.143:8083
15#.#.8.218:8083
15#.###.189.171:8083
15#.##6.39.221:8083
15#.###.250.105:8083
15#.##4.228.76:8083
15#.##4.7.95:8083
15#.##.87.128:8083
15#.##.101.137:8083
15#.###.102.149:8083
15#.##7.213.95:8083
15#.##0.10.153:8083
15#.##2.49.80:8083
15#.##.227.53:8083
15#.##.11.157:8083
15#.##.132.98:8083
15#.##.95.239:8083
15#.##4.73.244:8083
15#.##.207.41:8083
15#.##0.189.24:8083
15#.##6.113.49:8083
15#.##.91.152:8083
15#.##.176.213:8083
15#.#.200.84:8083
15#.#.66.20:8083
15#.##.24.60:8083
15#.##.83.206:8083
15#.###.148.105:8083
15#.###.126.170:8083
15#.#.218.185:8083
15#.##3.46.41:8083
15#.##.77.154:8083
15#.###.106.160:8083
15#.##7.237.42:8083
15#.##3.45.51:8083
15#.##.17.210:8083
15#.###.186.141:8083
15#.##2.243.65:8083
15#.###.204.100:8083
15#.###.217.129:8083
15#.##.123.188:8083
15#.##.164.187:8083
15#.##.154.13:8083
15#.##9.206.61:8083
15#.###.247.132:8083
15#.#.161.162:8083
15#.##2.25.158:8083
15#.##1.57.96:8083
15#.##.38.212:8083
15#.###.141.127:8083
15#.##.253.97:8083
15#.##4.186.42:8083
15#.##8.109.35:8083
15#.##.207.212:8083
15#.##1.29.170:8083
15#.##7.7.206:8083
15#.##1.96.197:8083
15#.##6.215.48:8083
15#.##.129.107:8083
15#.##4.10.240:8083
15#.###.192.246:8083
15#.##5.94.189:8083
15#.##2.3.23:8083
15#.##.53.3:8083
15#.##.28.140:8083
15#.###.143.249:8083
15#.##4.1.16:8083
15#.##1.176.78:8083
15#.##.165.185:8083
15#.##1.83.109:8083
15#.##.4.137:8083
15#.##.35.207:8083
15#.##.63.55:8083
15#.##.54.173:8083
15#.###.242.109:8083
15#.###.197.217:8083
15#.##3.48.25:8083
15#.#.104.21:8083
15#.##9.55.68:8083
15#.###.183.183:8083
45.##.168.86:44445

技术

术语

教育培训

误区

Technical Information

Curing recommendations