Linux.Packed.74

Technical Information

Malicious functions:

Removes itself

Modifies firewall settings:

iptables -I INPUT -p udp -m udp --dport 53328 -j ACCEPT

Network activity:

Awaits incoming connections on ports:

127.0.0.1:32855
0.0.0.0:53328

Establishes connection:

8.#.8.8:53
[:##]:53328
127.0.0.1:53328
14#.##1.121.134:23
52.##.123.71:80
12#.##6.155.150:80

HTTP GET requests:

http://##.##5.58.43/

Sends data to the following servers:

19#.###.223.123:38252
90.#.38.104:23
1.##.133.182:23
22#.##.26.137:23
22#.##.251.27:23
85.###.141.198:23
14#.##.147.208:23
64.###.209.130:23
20#.##7.40.71:23
64.##6.83.69:23
23#.##4.92.116:23
18#.##0.64.102:23
80.###.123.161:23
20#.##9.102.94:23
11#.##2.53.213:23
14#.##.143.85:23
44.###.221.162:23
18#.#.171.139:23
15#.##8.119.240:23
21#.##8.122.55:23
1.###.202.228:23
14#.##1.49.76:23
14#.##6.207.128:23
23#.##4.158.143:23
23#.##9.114.191:23
20#.##.181.47:23
24#.##0.146.207:23
99.##.150.240:23
16#.#1.166.7:23
10#.##4.60.173:23
50.###.104.234:23
19.##4.51.5:23
23#.##4.31.209:23
19#.##1.88.191:23
90.###.166.208:23
67.###.221.148:23
13#.##8.116.70:23
22#.##5.176.175:23
13.##4.60.55:23
12#.##.205.107:23
22#.##.22.134:23
22#.##1.82.209:23
19#.#7.144.4:23
42.##1.67.72:23
24#.##.67.170:23
12#.##3.208.199:23
19#.##.156.107:23
58.###.90.207:23
31.###.225.119:23
13.##.60.1:23
53.###.133.74:23
59.##.190.230:23
14#.##5.201.111:23
59.##2.80.22:23
14#.##1.121.134:23
23#.##.102.79:23
19#.##6.169.75:23
52.##.63.87:23
13.###.78.136:23
21#.##.60.184:23
23#.##6.249.95:23
10#.##.126.193:23
24#.##6.180.231:23
22#.##.238.89:23
15#.#42.1.31:23
45.#.155.72:23
22#.##.220.50:23
18#.##1.116.11:23
11#.##1.143.82:23
17#.##.198.95:23
12#.#.114.170:23
11#.##.89.233:23
59.###.237.162:23
24#.##7.216.10:23
97.##.37.28:23
45.###.111.148:23
25.#.29.211:23
13#.##1.209.239:23
96.###.179.203:23
24.##.35.43:23
12#.##9.180.214:23
22#.##2.138.160:23
96.###.148.129:23
12#.##1.38.241:23
14#.##7.10.31:23
18#.##4.135.144:23
86.###.76.147:23
13#.##3.30.17:23
17#.##.236.171:23
23#.##8.157.175:23
61.##4.61.43:23
71.###.134.119:23
17#.##8.121.241:23
11#.##8.105.180:23
98.##1.0.188:23
39.###.127.70:23
13#.##4.126.61:23
43.##8.124.6:23
17#.##7.232.249:23
10#.##8.110.143:23
21#.#2.90.65:23
18#.##2.102.116:23
21#.##0.105.19:23
48.##.60.26:23
67.##.158.17:23
16#.##0.87.112:23
24#.##4.26.67:23
64.###.200.252:23
24#.##1.96.117:23
22#.##5.136.169:23
11#.##8.220.201:23
25#.#.12.226:23
14.###.254.11:23
11#.##3.74.60:23
17#.##.111.45:23
9.##.92.26:23
20#.##.237.80:23
22#.##.136.206:23
17#.##4.109.45:23
24#.##3.17.94:23
42.##7.70.87:23
61.##9.30.80:23
18.##.5.5:23
72.##1.175.2:23
18#.##1.98.37:23
15#.##.197.94:23
51.###.141.86:23
19#.##1.250.210:23
14#.##.150.171:23
10#.##7.230.187:23
25#.##.153.67:23
11#.##3.200.84:23
22#.##1.52.194:23
20#.##0.14.207:23
86.###.228.132:23
17#.##.42.232:23
24#.##1.54.119:23
22#.##2.197.27:23
39.###.212.165:23
16#.##8.166.177:23
63.##.0.111:23
97.###.68.220:23
10#.##8.225.214:23
11#.##.140.135:23
17#.##9.118.96:23
58.###.213.65:23
18#.##.102.232:23
22#.##.29.233:23
13#.##1.120.186:23
14#.##5.45.172:23
96.##.124.34:23
10#.##0.70.64:23
17#.##.184.153:23
24#.##.142.240:23
66.###.204.165:23
19#.##2.142.181:23
10.##.177.39:23
88.##1.19.25:23
15#.##.42.211:23
24#.##.211.127:23
79.##0.43.80:23
19#.##8.218.0:23
<LOCAL_GATE>:23
64.#.#39.191:60391
52.###.172.39:80
38.##3.7.92:80
90.##.57.122:80
72.##.230.4:80
12#.##5.138.158:80
12#.##8.201.68:80
22#.##6.27.34:80
21#.##1.212.216:80
35.###.230.101:80
20#.##.107.164:80
20#.#.187.138:80
12#.##.207.101:80
16#.##8.208.37:80
13.##.180.20:80
23#.##.223.39:80
12#.##6.155.150:80
82.###.60.187:80
31.###.247.152:80
16#.##1.104.144:80
11#.##2.127.126:80
21#.#3.6.252:80
17#.##.13.139:80
90.###.218.16:80
21#.##5.227.237:80
10#.##6.40.202:80
19#.##7.216.255:80
63.###.125.216:80
41.##.126.177:80
21#.##.110.113:80
95.##.15.110:80
54.###.237.25:80
10#.##5.176.123:80
96.###.175.45:80
22#.##9.97.100:80
16#.##6.90.32:80
24.#.93.67:80
15#.##.143.223:80
2.###.160.127:80
38.##.122.179:80
24#.##.250.132:80
81.###.101.82:80
24#.##5.20.195:80
12#.##.45.207:80
10#.##5.222.49:80
85.##6.79.18:80
14#.##.238.161:80
82.##6.122.9:80
94.##8.8.247:80
20#.##7.138.83:80
51.###.132.220:80
23#.#.29.221:80
25#.#.42.71:80
95.###.208.95:80
16#.##0.52.145:80
63.###.203.222:80
17#.##8.18.254:80
24#.##1.83.172:80
70.##.117.95:80
1.###.19.160:80
13#.##8.127.147:80
21#.##0.60.115:80
10#.##8.232.127:80
10#.##3.211.30:80
10#.##9.53.107:80
63.###.217.99:80
62.##2.210.2:80
64.##3.8.132:80
24#.##7.72.227:80
25#.##.194.10:80
18.#.95.13:80
12#.##9.231.213:80
24#.##3.125.110:80
12#.##3.30.47:80
21#.##.249.75:80
24#.##5.221.90:80
65.##.184.51:80
17#.##9.164.241:80
69.#.123.118:80
23.###.176.45:80
12#.##1.226.162:80
86.###.215.111:80
12#.##6.58.251:80
53.###.108.33:80
11#.##.22.136:80
18#.##.212.205:80
18#.##.33.245:80
19#.##.104.181:80
19#.##9.169.246:80
11#.##7.140.109:80
88.###.123.130:80
23#.##8.52.60:80
15#.##3.32.46:80
15#.##8.6.168:80
13#.##9.168.17:80
11#.##4.133.186:80
19#.##2.28.238:80
18#.##.100.73:80
11#.#.103.236:80
68.###.236.192:80
12#.##4.92.199:80
92.##7.21.61:80
10#.##4.42.206:80
44.###.89.179:80
15#.##0.237.81:80
15#.#0.76.89:80
16#.##.165.237:80
15#.##4.106.50:80
2.###.68.177:80
77.###.237.63:80
14#.##0.83.211:80
17#.##3.110.243:80
71.###.137.254:80
20#.##1.155.244:80
52.##.123.71:80
11#.##3.110.200:80
69.###.198.83:80
14#.##1.44.100:80
24#.##5.62.67:80
22#.##9.188.245:80
10#.##7.216.235:80
70.##1.28.32:80
16#.##.114.195:80
18#.##.242.183:80
25#.##1.36.41:80
13#.##3.25.46:80
59.##.161.127:80
17#.##7.252.96:80
25#.##7.196.0:80
88.###.55.201:80
14#.##8.255.85:80
17#.##6.62.186:80
65.##.234.46:80
34.###.95.204:80
18#.##.66.137:80
76.##.195.22:80
15#.##5.153.250:80
16#.##.64.206:80
74.###.49.203:80
21#.##6.248.152:80
17#.##8.57.254:80
77.###.150.221:80
11#.##.237.206:80
48.##.24.30:80
25#.##9.231.237:80
77.##.241.96:80
83.###.24.177:80
99.###.187.134:80
24#.##.253.177:80
12#.##.13.207:80
15#.##.99.197:80
40.##2.4.162:80
1.##.6.215:80
72.##7.4.215:80
23#.#1.22.68:80
43.###.131.116:80
84.###.130.172:80
17#.##8.198.195:80
21#.##0.216.142:80
19.##.32.7:80
19#.##8.218.2:80
19#.##8.218.3:80
10#.###.175.217:21223
21#.##6.209.11:23
21#.##.106.203:23
15#.##.240.148:23
23#.#98.89.9:23
21#.##7.213.29:23
18#.##6.146.50:23
10#.##6.71.22:23
11#.##8.161.95:23
21#.##0.37.140:23
40.###.137.228:23
25#.##8.240.212:23
24#.##8.247.253:23
23#.##.75.169:23
21#.##6.8.251:23
25#.##3.232.212:23
82.##.19.211:23
52.##8.33.51:23
20#.##2.80.211:23
15#.##.114.28:23
23#.##.86.113:23
18#.##.50.177:23
16#.##9.46.238:23
52.###.109.254:23
19#.#.160.202:23
83.###.180.223:23
11#.##.100.220:23
18#.#6.32.86:23
10#.#7.87.70:23
17#.##8.77.138:23
18#.#4.2.248:23
83.##.179.189:23
15#.##8.109.251:23
20#.##.116.172:23
24#.#7.64.41:23
61.###.111.117:23
15#.##.157.249:23
13#.##.104.31:23
13#.#76.25.0:23
15#.##7.207.66:23
22#.##7.64.225:23
19#.##9.133.181:23
89.###.89.222:23
1.###.60.128:23
15#.##.212.22:23
86.###.243.80:23
35.###.54.133:23
19#.##2.225.163:23
84.###.137.175:23
15#.##.182.92:23
14#.##.198.24:23
19.###.241.70:23
40.###.44.248:23
10#.##3.77.148:23
54.##.35.66:23
21#.#.132.255:23
72.##.61.235:23
16#.##5.88.39:23
12#.##8.148.62:23
17#.##.158.210:23
17.###.221.176:23
19#.##.139.243:23
73.###.39.138:23
69.###.134.136:23
19#.##3.81.176:23
25#.##7.69.143:23
20#.#.127.39:23
18#.##.180.253:23
97.##7.244.2:23
21#.##9.81.184:23
85.##.103.145:23
10#.##.179.31:23
17#.##.123.69:23
17#.#00.8.5:23
10.##.6.36:23
23#.##6.61.216:23
13#.##3.143.218:23
64.##5.9.163:23
19.##.242.121:23
14#.##5.10.77:23
93.##.199.37:23
14#.##5.71.221:23
14#.##.107.49:23
53.##.190.231:23
18#.##6.97.35:23
13#.##5.185.41:23
22#.##0.136.156:23
10#.##7.114.139:23
77.##.155.205:23
44.###.88.219:23
19#.##.58.165:23
10.##1.79.39:23
18#.##0.14.223:23
19.##.178.244:23
23#.##1.8.125:23
16#.#60.6.15:23
97.##.148.175:23
25#.##1.34.33:23
60.##.31.36:23
83.##.225.116:23
54.##.167.111:23
21#.##6.55.168:23
20#.#.19.44:23
23#.##.135.224:23
14#.##.115.47:23
98.###.172.32:23
23#.##1.254.255:23
16#.##.79.214:23
10#.##2.250.24:23
24#.##5.133.168:23
18#.##1.171.114:23
16#.##.172.108:23
75.##.14.230:23
14#.##5.88.98:23
11#.##8.169.105:23
98.###.255.42:23
13#.##.242.88:23
80.###.205.140:23
21#.##.114.34:23
20#.##2.235.128:23
18#.##6.222.182:23
80.##.94.180:23
82.##.121.48:23
10#.##.171.92:23
2.#.#24.115:23
16#.##6.53.177:23
59.###.192.94:23
27.###.132.129:23
10.###.158.40:23
14#.##8.91.57:23
14#.##9.153.247:23
20#.##7.67.226:23
25#.##.101.225:23
70.###.11.231:23
90.##.31.28:23
40.###.14.147:23
15#.##.145.187:23
14#.##5.16.209:23
91.###.130.42:23
14#.##7.253.245:23
73.##.101.99:23
45.###.61.236:23
13#.##0.15.43:23
15#.##1.104.214:23
84.###.65.195:23
16#.##1.236.81:23
20#.##4.185.231:23
14#.#.120.84:23
83.##.18.76:23
17#.##5.35.11:23
43.##.13.40:23
23.##0.18.2:23
73.###.25.145:23
13#.##2.83.230:23
57.##.236.112:23
15#.#5.73.34:23
24#.##9.10.175:23
13#.##6.209.199:23
22#.##4.68.224:23
22#.##.133.210:23
10#.##.183.80:23
19#.##8.218.4:23
19#.##8.218.5:23

Receives data from the following servers:

14#.##1.121.134:23

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations