Linux.Siggen.3343

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

[md]

Kills the following processes:

run.sh

Network activity:

Awaits incoming connections on ports:

0.0.0.0:55321

Establishes connection:

20#.##6.81.105:559
8.#.8.8:53
50.##.50.52:0

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

Sends data to the following servers:

20#.##6.81.105:559
12#.##.131.139:23
94.###.125.87:23
19#.##4.179.248:23
20.###.140.23:23
9.###.45.195:23
21#.##.40.235:23
16#.##1.54.33:23
65.##.227.125:23
11#.##8.95.187:23
15#.##5.169.111:23
45.###.209.134:23
20#.#5.68.21:23
19.#.167.15:23
14#.##.35.157:23
36.###.238.72:23
90.#.61.19:23
70.###.153.36:23
16#.##.205.189:23
19#.##.209.23:23
18.###.243.11:23
58.###.178.220:23
77.###.113.128:23
19#.##8.204.148:23
53.###.44.236:23
14#.##2.156.163:23
18#.#0.63.64:23
36.##.181.242:23
86.##.91.24:23
80.##6.7.44:23
20#.##0.160.182:23
81.##.242.92:23
17#.##.97.222:23
15#.##0.153.109:23
96.##.37.1:23
17#.##.27.230:23
58.##.250.58:23
94.###.56.110:23
16#.##.254.44:23
69.##.46.5:23
16#.##8.30.51:23
21#.##.86.159:23
19#.##.230.99:23
54.###.105.205:23
21#.##5.184.145:23
10#.##5.129.73:23
21#.##.126.94:23
93.###.104.29:23
12#.##6.125.225:23
45.##.33.45:23
20#.##9.245.56:23
20#.##6.176.24:23
14#.##1.209.142:23
13#.##.174.74:23
10#.##9.90.157:23
17.###.66.203:23
86.#.164.14:23
16#.##9.121.230:23
13#.##.101.98:23
10#.##.168.90:23
12#.##1.180.117:23
12.###.27.123:23
22#.##8.215.178:23
13#.##6.189.146:23
20.##.235.130:23
85.##.241.143:23
19#.##9.43.181:23
11#.##8.170.14:23
39.##.92.3:23
19#.##1.23.216:23
18#.##.192.165:23
17#.##.173.239:23
70.##.102.181:23
14#.##.189.66:23
82.#.139.175:23
20#.##7.151.180:23
20.###.93.195:23
18#.##.56.161:23
21#.##9.187.38:23
19#.##7.187.152:23
50.##.46.182:23
10#.##.131.205:23
40.###.145.186:23
20#.##.179.222:23
62.###.191.179:23
50.##.95.143:23
14#.##7.23.113:23
11#.##4.173.165:23
23.###.108.36:23
11#.#.2.196:23
13#.##3.125.212:23
17#.##.228.42:23
12.##.114.30:23
10#.##6.166.85:23
15#.##6.172.50:23
2.###.155.123:23
65.###.53.164:23
19#.##2.131.242:23
21#.##.155.163:23
37.###.157.80:23
21#.#6.58.26:23
16#.##.205.10:23
10#.##2.99.138:23
24.#.91.23:23
70.##.62.231:23
80.##.196.49:23
12#.##4.25.222:23
42.###.196.247:23
16#.##8.15.125:23
40.###.167.146:23
16#.##.183.166:23
22#.##4.246.233:23
20#.##4.191.197:23
15#.##5.233.241:23
83.##1.83.94:23
12#.##.242.66:23
77.###.51.134:23
18#.##.152.111:23
17#.##.75.227:23
17#.##4.129.134:23
12#.##4.194.89:23
12#.##7.148.255:23
22#.##.114.187:23
8.##.142.64:23
18#.##3.103.147:23
12#.#.29.182:23
47.##.68.53:23
20#.##.221.100:23
13#.#4.37.88:23
41.##.176.67:23
12#.##.208.117:23
13#.##.223.30:23
77.###.252.28:23
13#.##3.66.79:23
17#.#51.95.3:23
18#.##.232.225:23
42.###.64.168:23
13#.##1.175.19:23
11#.##0.2.180:23
62.###.191.36:23
12#.##.28.254:23
60.###.85.227:23
14#.##7.211.213:23
51.###.24.240:23
9.##.107.55:23
13.###.248.162:23
49.###.220.90:23
25.##0.59.14:23
12#.##0.90.68:23
20#.##.183.153:23
20#.##.59.166:23
11#.##.133.35:23
1.##.98.243:23
99.###.192.87:23
22#.##.201.25:23
64.###.103.11:23
18#.#6.76.34:23
13#.##5.110.91:23
23.#.76.173:23
18#.##.100.220:23
12#.##7.96.166:23
19#.##4.93.255:23
97.###.210.127:23
83.##0.22.35:23
10#.#71.36.9:23
83.###.176.98:23
18#.##8.126.212:23
20#.##9.90.196:23
20#.##3.14.16:23
12#.##.230.177:23
19#.##6.27.41:23
91.###.118.138:23
61.###.194.220:23
76.##.117.149:23
38.##.249.34:23
10#.##9.212.173:23
16#.#.51.177:23
9.###.154.246:23
19#.##5.251.92:23
10#.##.30.230:23
17#.##7.17.247:23
14#.##3.29.145:23
85.##.46.228:23
15#.#0.7.60:23
19#.##.199.235:23
9.###.57.182:23
15#.##.123.184:23
15#.##.83.191:23
36.##2.36.62:23
16#.##8.80.129:23
65.###.227.75:23
15#.##9.228.160:23
11#.##0.65.71:23
90.###.127.239:23
12#.##.235.94:23
10#.##3.93.197:23
21#.##6.24.192:23
20#.##8.27.231:23
10#.##.225.182:23
12#.##5.168.118:23
10#.##2.9.128:23
43.##.89.128:23
27.###.117.124:23
11#.#4.78.14:23
23.###.214.142:23
10#.#.24.191:23
20#.##3.120.15:23
13#.##4.3.233:23
78.##.138.161:23
20#.##.187.152:23
14#.##4.127.15:23
41.##.51.36:23
16#.##1.59.250:23
49.#.53.67:23
20#.##7.79.97:23
76.###.18.144:23
12#.##8.131.220:23
17#.#3.11.25:23
17#.##7.227.2:23
14.###.150.108:23
65.###.47.144:23
10#.##.230.104:23
15#.##.184.223:23
17#.##9.95.149:23
20#.##4.104.252:23
45.###.184.249:23
82.###.147.112:23
20#.##3.187.70:23
18#.##2.194.177:23
90.#.231.84:23
43.##0.44.23:23
25.###.134.55:23
17.##.253.63:23
36.###.51.232:23
11#.##.198.45:23
16#.##6.28.86:23
1.#.#66.19:23
27.##2.4.191:23
10#.##.58.230:23
10#.##.189.245:23
11#.##2.88.199:23
11#.##2.185.225:23
13#.##8.5.232:23
37.###.111.72:23
11#.##8.130.125:23
18#.##.42.246:23
19#.##2.118.30:23
68.##5.55.50:23
77.##.22.132:23
41.##1.23.98:23
59.###.223.157:23
11#.#0.98.26:23
1.##.45.191:23
17#.##3.119.89:23
65.##.175.209:23
88.##.137.214:23
12#.##1.188.196:23
45.###.100.141:23
87.###.196.152:23
16#.##9.220.166:23
60.##7.2.180:23
13#.#7.48.89:23
11#.##3.69.25:23
13.##2.7.81:23
19#.##8.180.35:23
17#.##7.74.220:23
12#.##6.97.36:23
13.##.232.11:23
20#.##2.56.135:23
61.###.39.100:23
16#.##.24.223:23
82.###.75.112:23
14#.##0.40.53:23
13#.##3.230.108:23
10#.##.239.32:23
11#.##.17.243:23
91.##.136.208:23
10#.##7.210.225:23
21#.##6.231.81:23
15#.##4.131.145:23
19#.#7.152.7:23
73.##.205.30:23
22#.##9.112.142:23
14#.#.93.162:23
14#.##2.120.47:23
97.##4.20.65:23
58.##.166.190:23
22#.##.137.98:23
12#.#.25.104:23
74.##.164.166:23
14#.##.156.61:23
11#.##2.15.138:23
11#.##8.171.68:23
12#.##1.65.197:23
71.###.120.101:23
13#.##.235.223:23
48.###.235.210:23
52.###.81.184:23
82.###.117.63:23
10#.##5.14.200:23
20#.##2.121.141:23
20#.##.123.22:23
21#.##3.27.244:23
72.###.134.28:23
21#.##.192.169:23
79.##.221.249:23
34.##.57.130:23
18#.##3.38.133:23
16#.##9.12.88:23
25.###.15.120:23
41.###.249.46:23
80.###.138.218:23
86.###.29.206:23
43.##.14.1:23
10#.##0.176.42:23
19#.##7.144.184:23
20#.##.25.254:23
87.###.144.187:23
67.##.118.118:23
14#.##.25.183:23
12#.##.35.207:23
22#.##7.45.119:23
77.###.229.100:23
10#.##.102.142:23
74.##.126.202:23
40.##.160.221:23
1.##.167.161:23
19.###.16.151:23
34.###.105.19:23
2.###.106.109:23
16#.##4.218.83:23
18#.##8.212.103:23
37.##.223.171:23
10#.#1.196.4:23
19#.##.224.124:23
22#.##7.78.149:23
12#.#0.43.19:23
15#.##.212.207:23
10#.##.223.244:23
9.###.253.149:23
93.##.82.242:23
43.###.146.60:23
11#.##.194.47:23
11#.##.110.248:23
22#.##7.52.26:23
13#.##5.100.124:23
44.###.255.116:23
12#.##.172.153:23
21#.##7.103.129:23
2.###.26.71:23
16#.##9.184.29:23
19#.##.217.125:23
15#.##.229.119:23
61.###.244.212:23
14#.##.47.109:23
65.###.107.95:23
13#.##.193.114:23
49.###.60.102:23
11#.##.217.194:23
22#.##8.75.241:23
87.###.70.175:23
15#.#4.66.13:23
16#.##2.32.77:23
12#.##.234.235:23
21#.#.104.194:23
10#.##8.19.130:23
13#.##.110.183:23
13#.##9.120.37:23
18#.##2.146.27:23
18#.##.28.100:23
44.##2.70.88:23
13#.##2.181.17:23
19#.##.30.200:23
88.#.242.156:23
20#.##5.165.226:23
72.##.242.36:23
10#.##.10.154:23
43.##.106.66:23
12.###.197.240:23
12#.##.145.109:23
32.###.244.132:23
77.###.222.179:23
16#.##6.183.246:23
13#.##4.24.44:23
12#.##4.46.118:23
17#.##7.232.164:23
14#.##0.206.144:23
17#.##5.67.71:23
10#.##4.176.34:23
19#.##1.191.83:23
16#.##2.37.135:23
15#.##2.38.28:23
22#.#9.4.107:23
15#.##7.89.191:23
14#.##5.221.221:23
95.###.245.146:23
54.###.127.187:23
53.###.130.33:23
18#.##5.135.142:23
15#.##0.96.193:23
13#.##2.97.65:23
10#.#.15.180:23
15#.##.75.253:23
39.###.107.175:23
12#.##.29.154:23
19#.##0.100.135:23
18#.##0.7.135:23
93.###.168.91:23
14#.#.76.184:23
5.##.216.114:23
21#.##0.123.94:23
21#.##.18.108:23
60.###.137.217:23
19#.##2.3.172:23
21#.##6.47.211:23
21#.##6.86.177:23
22#.##3.43.86:23
68.#.40.74:23
20#.#5.21.97:23
15#.##7.146.15:23
18#.##.123.68:23
20#.##.104.202:23
11#.##1.93.66:23
15#.##2.89.103:23
19#.#2.53.71:23
22#.##5.74.138:23
11#.##4.238.52:23
12#.##.148.240:23
11#.##8.150.182:23
97.##9.78.24:23
20#.##4.69.66:23
48.##7.75.80:23
5.##.13.218:23
96.##.114.214:23
18#.##5.150.48:23
60.##.17.1:23
20#.#9.95.89:23
13#.##7.15.228:23
18#.##8.187.118:23
40.##.56.72:23
21#.##0.16.221:23
21#.##6.175.88:23
15#.##1.108.212:23
76.###.197.94:23
44.##.3.143:23
14#.##8.209.193:23
14#.##3.122.172:23
20#.##2.144.60:23
17#.#4.21.69:23
22#.#.79.88:23
14#.##.51.186:23
34.###.162.252:23
13#.##0.70.114:23
19#.##1.106.1:23
17#.##5.206.199:23
21#.##7.1.154:23
14#.#.255.113:23
17#.##3.174.182:23
10#.##5.116.138:23
21#.##7.29.105:23
20#.##3.231.224:23
61.##.188.194:23
45.###.214.200:23
13.###.249.248:23
10#.##6.15.135:23
89.###.231.210:23
94.##.126.235:23
14#.##.197.57:23
14#.##6.41.244:23
83.##2.72.45:23
16#.##1.129.137:23
8.#.#86.87:23
21#.##.30.253:23
5.#.#40.158:23
19#.##.214.89:23
20#.##.252.184:23
59.###.183.223:23
69.###.155.199:23
9.##.165.178:23
11#.##2.20.232:23
12#.##.190.119:23
63.###.146.157:23
60.###.147.24:23
10#.##0.91.94:23
41.###.230.172:23
61.###.17.223:23
18#.##.151.110:23
12.###.234.250:23
20.###.185.196:23
40.###.217.76:23
86.##.47.255:23
16#.##4.192.23:23
19#.##.208.168:23
18#.##1.171.211:23
10#.##.136.225:23
57.##.126.25:23
19#.##3.10.119:23
73.###.67.198:23
20#.##0.94.105:23
59.#.134.143:23
10#.##.239.32:23
20#.##1.167.4:23
35.##.207.234:23
12#.##.67.152:23
17#.##5.168.174:23
42.#.50.210:23
36.#.243.151:23
14.###.243.60:23
74.###.226.190:23
27.##.63.183:23
80.###.93.149:23
15#.#0.0.120:23
19#.#4.82.63:23
11#.##8.255.133:23
21#.##3.43.203:23
17#.##.145.210:23
22#.##.222.37:23
16#.##.157.232:23
64.##.196.81:23
10#.#1.74.38:23
11#.##6.1.101:23
17#.##.141.242:23
15#.##3.111.96:23
77.##3.30.34:23
45.##.92.16:23
22#.##8.54.150:23
11#.##7.112.118:23
18#.##9.193.43:23
16#.##9.190.231:23
52.##.43.208:23
10#.##.24.103:23
32.##.158.131:23
65.##8.14.22:23
79.###.97.197:23
10#.##.187.74:23
10#.##.75.144:23
13#.##3.222.135:23
15#.##.232.202:23
46.##.135.131:23
13.###.66.111:23
15#.##.102.119:23
17#.##.146.88:23
31.###.135.142:23
2.##.104.110:23
79.##.40.211:23
46.###.208.236:23
42.###.123.235:23
17#.##.55.161:23
86.###.49.182:23
15#.##6.245.38:23
21#.##5.149.62:23
14#.##5.202.124:23
20#.##.123.179:23
14#.#5.226.7:23
19#.#.114.101:23
14#.##0.181.88:23
12#.##1.60.166:23
17#.#9.86.39:23
39.###.228.243:23
20#.#.126.41:23
23.##.253.241:23
78.###.113.202:23
10#.##1.255.208:23
96.##3.166.7:23
21#.#15.52.6:23
10#.##.146.168:23
17#.##9.102.104:23
35.###.180.142:23
40.###.160.81:23
15#.#5.3.167:23
20.##3.9.196:23
19#.##0.163.209:23
73.##6.50.43:23
21#.#.114.133:23
11#.##1.158.66:23
20#.##1.155.210:23
13#.##4.233.150:23
99.##.182.204:23
14#.##7.233.112:23
93.##1.68.36:23
17#.##7.71.208:23
15#.##8.218.110:23
14#.##.131.63:23
15#.##9.217.70:23
89.##6.185.4:23
12#.##2.117.160:23
11#.##0.249.213:23
99.##.23.192:23
99.##.130.111:23
32.###.192.97:23
98.###.209.42:23
13#.##8.224.175:23
18#.##.25.180:23
12#.##.54.249:23
21#.#5.91.38:23
34.###.110.111:23
38.###.70.159:23
27.##1.23.6:23
88.###.21.175:23
10#.##1.59.85:23
78.###.166.220:23
14#.##.114.247:23
10#.##0.191.74:23
10#.##.172.19:23
83.##7.115.4:23
19#.##4.152.255:23
15#.##4.250.131:23
10#.##9.15.94:23
11#.##.34.203:23
20#.##.101.70:23
14#.##6.27.52:23
12#.##1.146.192:23
14#.##4.177.211:23
36.###.68.158:23
21#.##2.107.65:23
45.###.148.70:23
14#.##5.84.220:23
73.##.2.34:23
19#.##6.31.161:23
11#.#2.2.166:23
14#.##3.26.73:23
17#.##1.74.253:23
8.###.189.147:23
15#.##.201.47:23
20#.#39.92.1:23
18#.##.14.144:23
19#.##.126.42:23
48.#.207.74:23
44.###.94.205:23
84.##.66.67:23
14#.##.238.240:23
19#.##9.21.160:23
20#.##.55.145:23
18#.##3.167.164:23
47.###.114.81:23
83.##4.6.124:23
49.##.249.183:23
14.###.209.165:23
42.###.133.251:23
15#.##7.105.191:23
79.###.187.169:23
23.##.207.27:23
89.##3.31.24:23
19.###.146.222:23
25.###.47.195:23
47.###.152.219:23
91.###.122.238:23
18#.#0.91.49:23
18#.##.225.181:23
47.###.48.116:23
14#.##2.220.84:23
10#.##4.87.156:23
10#.##.167.203:23
12#.##.214.93:23
14#.##4.82.66:23
21#.##4.249.230:23
19#.#6.77.25:23
47.###.185.226:23
12#.##6.75.159:23
38.###.190.251:23
97.###.209.222:23
20#.##.234.150:23
11#.##.246.252:23
44.###.232.141:23
11#.##1.219.238:23
87.###.155.143:23
14#.##3.82.155:23
70.##.189.252:23
32.##.123.187:23
47.##.7.171:23
11#.##4.18.228:23
18#.##4.138.233:23
19#.##.118.164:23
19#.##.161.67:23
11#.##7.50.18:23
15#.##8.224.178:23
45.###.184.142:23
50.#.49.108:23
2.##.61.21:23
19#.##.204.13:23
15#.#84.41.8:23
39.##.82.11:23
20#.##1.255.58:23
15#.##7.127.237:23
15#.##1.198.236:23
32.#.247.122:23
23.##.41.191:23
75.##.88.175:23
19#.##.196.191:23
67.###.166.82:23
17#.##2.141.200:23
15#.#1.85.36:23
17#.##7.151.197:23
18#.##5.174.61:23
14#.##2.26.36:23
19#.##7.107.24:23
14#.##.226.11:23
96.##.25.192:23
18#.##9.21.148:23
19#.##5.58.197:23
64.##.101.52:23
17#.#46.58.0:23
22#.##8.144.91:23
22#.##.245.189:23
21#.##8.56.247:23
86.##.78.248:23
15#.##5.74.104:23
10#.##2.53.196:23
87.##9.2.18:23
14#.##5.217.165:23
19#.##8.181.70:23
13#.##.49.216:23
16#.##1.11.155:23
18#.##0.254.230:23
14#.##.21.172:23
20#.##.124.28:23
21#.#11.2.33:23
62.###.102.124:23
22#.##6.255.220:23
19#.##9.245.192:23
17#.##5.224.168:23
10#.##3.244.166:23
69.###.218.215:23
20#.#.145.145:23
17#.#9.16.8:23
88.###.121.250:23
17#.##4.177.115:23
92.###.113.213:23
1.##.92.183:23
20#.##.161.28:23
49.##.230.132:23
12#.##1.153.182:23
17#.##7.238.121:23
16#.##5.25.225:23
69.###.60.216:23
21#.##.188.182:23
14#.##.219.174:23
19.###.207.31:23
91.###.207.249:23
17#.##7.10.73:23
20#.##5.230.125:23
81.###.220.249:23
19#.#1.243.5:23
9.###.112.213:23
65.###.33.106:23
68.#.39.182:23
19#.##3.45.64:23
50.##.50.52:0

Receives data from the following servers:

20#.##6.81.105:559

技术

术语

教育培训

误区

Technical Information

Curing recommendations