Technical Information
Malicious functions:
Removes itself
Substitutes application name for:
- j21mfcfd0pn5o5ighjh4lkog3ogm
Network activity:
Establishes connection:
- 21#.##7.32.62:62
- 8.#.8.8:53
Attacks using a special dictionary (brute-force technique) via the Telnet protocol.
Sends data to the following servers:
- 15#.##6.115.117:23
- 12#.##7.207.49:23
- 18#.##8.96.158:23
- 12#.##4.212.167:23
- 98.###.243.243:23
- 62.##.110.46:23
- 36.##.204.156:23
- 18#.##.234.186:23
- 21#.##3.16.171:23
- 73.##.215.53:23
- 20#.##2.57.20:23
- 16#.##7.168.164:23
- 31.###.145.106:23
- 13#.##.132.208:23
- 98.##.157.251:23
- 18#.##.169.240:23
- 90.##.126.149:23
- 11#.##.241.60:23
- 19#.##.223.196:23
- 12#.##2.161.72:23
- 11#.##.211.38:23
- 10#.##4.55.175:23
- 20.###.146.251:23
- 12#.##4.21.115:23
- 14#.##0.217.174:23
- 22#.##2.126.114:23
- 61.##5.238.6:23
- 72.###.147.168:23
- 86.##.226.173:23
- 19#.##.214.206:23
- 11#.##0.46.13:23
- 20#.##3.236.29:23
- 18#.#.198.31:23
- 13#.##8.206.92:23
- 76.##3.93.53:23
- 16#.##7.136.56:23
- 16#.##4.64.29:23
- 18#.##1.110.232:23
- 40.##8.59.66:23
- 78.###.126.77:23
- 20#.##1.235.183:23
- 12#.##6.154.228:23
- 97.##.247.205:23
- 21#.##7.48.236:23
- 10#.##2.61.30:23
- 16#.##8.236.113:23
- 14#.##1.156.106:23
- 82.###.160.84:23
- 69.###.178.190:23
- 16#.#3.27.66:23
- 19#.##.162.45:23
- 10#.##3.77.93:23
- 12.##.124.35:23
- 85.##.7.184:23
- 18#.##6.174.164:23
- 90.##.72.118:23
- 81.##.74.206:23
- 20#.#.254.102:23
- 12#.##.79.237:23
- 12#.##.119.175:23
- 18#.##.30.123:23
- 17#.##.243.127:23
- 13.###.17.160:23
- 22#.##0.184.138:23
- 18#.##9.227.129:23
- 75.###.14.167:23
- 11#.##.174.31:23
- 15#.##.73.212:23
- 17#.##2.84.69:23
- 10#.##9.6.171:23
- 12#.#3.37.79:23
- 31.###.228.10:23
- 17#.##6.232.184:23
- 10#.##1.89.236:23
- 14#.##6.18.69:23
- 61.##8.86.63:23
- 18.#.221.246:23
- 35.###.134.95:23
- 12.###.101.44:23
- 86.##.253.70:23
- 17#.##8.84.122:23
- 34.#.34.96:23
- 4.##.117.55:23
- 15#.##1.185.189:23
- 21#.##.105.249:23
- 19#.#2.43.62:23
- 10#.##2.192.48:23
- 62.###.50.111:23
- 17#.##4.92.231:23
- 90.##.2.106:23
- 13.##3.64.26:23
- 22#.##8.233.75:23
- 18#.##8.180.157:23
- 68.###.156.51:23
- 19#.##.215.174:23
- 10#.#2.70.8:23
- 14#.##6.169.180:23
- 14#.##5.38.138:23
- 18#.#0.49.99:23
- 70.##.20.14:23
- 40.###.244.13:23
- 76.##.106.139:23
- 20#.##1.245.201:23
- 18#.#5.62.69:23
- 27.##.247.202:23
- 10#.#.238.63:23
- 79.#.159.238:23
- 10#.##1.3.141:23
- 10#.##.104.60:23
- 79.###.233.20:23
- 4.##.198.247:23
- 42.##.54.146:23
- 16#.##5.99.67:23
- 11#.#0.67.71:23
- 19#.##.54.135:23
- 13.###.227.219:23
- 65.###.226.138:23
- 73.##.49.168:23
- 58.###.140.116:23
- 61.###.217.14:23
- 20#.##6.177.110:23
- 22#.##1.107.25:23
- 39.###.78.200:23
- 10#.##3.229.50:23
- 17#.##4.74.233:23
- 60.##.25.121:23
- 19#.##0.104.104:23
- 19#.#.136.68:23
- 15#.##2.44.26:23
- 22#.##.91.245:23
- 19#.##.205.174:23
- 16#.#4.1.72:23
- 19#.##.38.148:23
- 14#.##.169.104:23
- 19#.##8.59.167:23
- 63.###.199.113:23
- 16#.##.214.105:23
- 14#.##.40.222:23
- 17#.#7.26.18:23
- 73.###.248.25:23
- 15#.##8.92.218:23
- 77.###.58.111:23
- 38.###.163.31:23
- 19.###.103.204:23
- 83.###.47.121:23
- 9.###.199.103:23
- 95.###.136.166:23
- 17#.##7.40.252:23
- 46.###.93.106:23
- 15#.#2.65.68:23
- 18#.##.207.145:23
- 57.###.238.207:23
- 17.##.222.124:23
- 78.##.61.126:23
- 14.##.79.106:23
- 4.###.99.230:23
- 19.###.248.96:23
- 20#.##.197.160:23
- 17.##.190.247:23
- 19#.##1.65.84:23
- 79.##.16.137:23
- 24.###.132.23:23
- 19#.##.192.81:23
- 53.###.242.145:23
- 19#.#0.77.94:23
- 20#.##.90.238:23
- 17#.##.247.80:23
- 10#.##5.165.21:23
- 13#.##.247.194:23
- 15#.##.184.97:23
- 15#.#07.50.8:23
- 19.###.28.150:23
- 16#.##.10.166:23
- 36.##2.5.225:23
- 13#.##.189.252:23
- 68.###.105.244:23
- 17#.##0.218.72:23
- 79.##.125.186:23
- 15#.##.145.42:23
- 17#.##.155.14:23
- 89.###.200.169:23
- 15#.##8.152.76:23
- 12#.##4.240.170:23
- 65.###.85.179:23
- 84.###.253.128:23
- 21#.##0.223.199:23
- 97.###.243.181:23
- 22#.##2.113.136:23
- 96.##1.70.93:23
- 27.###.200.118:23
- 10#.##2.76.125:23
- 47.###.47.128:23
- 21#.##.19.213:23
- 88.###.110.199:23
- 15#.##.61.115:23
- 11#.##1.29.206:23
- 22#.##.234.177:23
- 18#.#.30.245:23
- 14#.##.144.100:23
- 13#.##7.186.251:23
- 44.###.113.36:23
- 11#.##0.232.48:23
- 42.###.213.140:23
- 46.###.129.208:23
- 15#.##8.133.165:23
- 62.###.23.206:23
- 18#.##3.212.238:23
- 63.###.191.21:23
- 19#.##2.220.85:23
- 20#.##3.65.56:23
- 24.##0.3.217:23
- 60.###.217.49:23
- 19#.##8.23.59:23
- 85.###.137.174:23
- 31.###.255.112:23
- 17#.##3.62.66:23
- 86.##3.32.38:23
- 68.##.122.253:23
- 14#.#7.14.79:23
- 12#.##.204.137:23
- 16#.##5.123.16:23
- 17#.##.175.92:23
- 12#.##.153.167:23
- 76.##.46.147:23
- 18#.##6.47.85:23
- 11#.##.230.15:23
- 16#.##0.102.175:23
- 21#.##6.185.242:23
- 81.##.13.213:23
- 4.###.91.251:23
- 68.###.181.179:23
- 4.###.0.109:23
- 17.###.15.183:23
- 1.##.36.121:23
- 18#.#.193.227:23
- 19#.##.163.58:23
- 80.##.142.129:23
- 17#.#3.86.37:23
- 20#.##6.225.180:23
- 74.##.216.34:23
- 21#.##1.144.117:23
- 16#.##8.23.156:23
- 20#.#8.4.98:23
- 18#.##7.57.200:23
- 20#.##.17.106:23
- 97.###.31.163:23
- 11#.##3.208.3:23
- 21#.##1.231.83:23
- 88.##.244.194:23
- 15#.##5.165.86:23
- 27.###.194.189:23
- 61.###.175.234:23
- 20#.##.136.24:23
- 21#.##.123.92:23
- 18#.##9.30.100:23
- 21#.#2.1.57:23
- 17#.##3.206.214:23
- 17#.##4.159.171:23
- 5.###.16.94:23
- 73.###.40.213:23
- 16#.##8.92.106:23
- 16#.##.72.177:23
- 17#.##0.174.170:23
- 10#.##5.96.10:23
- 73.###.105.73:23
- 12#.##6.149.79:23
- 46.###.217.188:23
- 77.##.240.35:23
- 20#.##.80.139:23
- 11#.#.200.85:23
- 19#.##5.249.115:23
- 4.##.181.11:23
- 22#.##5.200.160:23
- 32.###.112.70:23
- 78.##.45.190:23
- 21#.##2.107.227:23
- 14#.##8.128.62:23
- 19.##.10.138:23
- 17#.##9.72.180:23
- 83.##.141.206:23
- 22#.##4.223.3:23
- 17#.#4.13.66:23
- 15#.##4.102.79:23
- 19#.##.163.66:23
- 8.##.106.195:23
- 10#.##3.116.93:23
- 82.##.189.15:23
- 19#.#0.11.67:23
- 19#.##.233.15:23
- 14#.##5.23.191:23
- 22#.##.242.149:23
- 45.##.19.42:23
- 19#.##.36.130:23
- 14#.##0.218.177:23
- 71.###.195.89:23
- 40.##.55.86:23
- 22#.##.110.255:23
- 13#.#.244.209:23
- 16#.##8.199.73:23
- 16#.##6.189.103:23
- 19#.##1.39.156:23
- 18#.##9.74.32:23
- 18#.##6.146.116:23
- 10#.##7.138.118:23
- 53.##.251.153:23
- 15#.##6.211.244:23
- 21#.##6.254.168:23
- 12#.##5.110.136:23
- 15#.#.61.28:23
- 14#.##7.229.158:23
- 21#.#.230.180:23
- 48.##.69.246:23
- 21#.##0.75.88:23
- 16#.##4.108.167:23
- 97.###.243.135:23
- 44.###.195.85:23
- 19#.##6.205.249:23
- 18.###.39.208:23
- 23.###.151.233:23
- 20#.##3.149.173:23
- 17#.##.112.246:23
- 74.##8.241.5:23
- 16#.##1.171.11:23
- 11#.##.78.102:23
- 90.###.230.168:23
- 10#.##9.233.18:23
- 19#.##5.29.83:23
- 62.##.105.86:23
- 22#.##2.58.209:23
- 91.###.172.109:23
- 61.###.111.191:23
- 17#.##4.12.94:23
- 45.###.247.129:23
- 17#.##1.146.166:23
- 19#.##8.231.14:23
- 20#.##9.90.145:23
- 17#.##9.61.249:23
- 18#.##.180.20:23
- 14#.##.230.14:23
- 16#.##9.157.101:23
- 21#.##0.36.237:23
- 88.#.232.254:23
- 13#.##4.189.113:23
- 19.###.89.179:23
- 19#.##7.53.29:23
- 11#.#.164.197:23
- 78.##2.2.252:23
- 93.##0.24.97:23
- 89.##.164.23:23
- 16#.##.114.194:23
- 16#.##.180.227:23
- 20#.##6.3.215:23
- 12#.##0.185.12:23
- 36.##5.27.15:23
- 21#.##1.218.206:23
- 11#.##8.61.77:23
- 19.###.60.161:23
- 9.###.100.254:23
- 21#.##6.177.229:23
- 10#.#4.42.86:23
- 16#.##3.46.116:23
Receives data from the following servers:
- 21#.##7.32.62:62