Technical Information
Malicious functions:
Launches itself as a daemon
Substitutes application name for:
- uJORZUjtfPDsbBa03D3488O5F2gG
Network activity:
Awaits incoming connections on ports:
- 0.0.0.0:23
- 0.0.0.0:22
- 0.0.0.0:443
- 0.0.0.0:81
- 0.0.0.0:8080
Establishes connection:
- 8.#.8.8:53
- 80.###.97.49:18321
Attacks using a special dictionary (brute-force technique) via the Telnet protocol.
Sends data to the following servers:
- 14#.#3.31.54:23
- 13#.##4.118.194:23
- 15#.##.211.211:23
- 77.###.214.97:23
- 99.##.48.70:23
- 12#.##.21.149:23
- 48.###.159.181:23
- 82.#.222.87:23
- 89.###.125.43:23
- 85.###.109.78:23
- 11#.##6.86.197:23
- 20#.##9.144.122:23
- 17#.##2.209.24:23
- 47.##.47.122:23
- 9.###.132.172:23
- 42.##8.74.80:23
- 44.##.22.221:23
- 60.##.106.185:23
- 98.###.85.206:23
- 10#.##1.7.127:23
- 14#.##9.210.191:23
- 76.##9.31.11:23
- 19#.##4.33.73:23
- 1.###.245.48:23
- 13#.#.8.240:23
- 19#.#3.28.88:23
- 36.##4.73.82:23
- 32.##.29.227:23
- 19#.##3.100.227:23
- 65.#.216.87:23
- 20#.##.122.42:23
- 90.##.232.135:23
- 17#.#2.5.178:23
- 76.##.78.143:23
- 10#.##5.77.226:23
- 9.###.17.128:23
- 82.##.142.41:23
- 91.###.142.212:23
- 20#.##2.15.137:23
- 16#.##.147.228:23
- 70.###.66.190:23
- 90.##4.0.46:23
- 15#.##0.168.249:23
- 12#.##4.153.7:23
- 13#.##.84.245:23
- 57.###.109.38:23
- 21#.##3.125.248:23
- 40.##0.50.4:23
- 95.###.97.161:23
- 19#.##0.189.178:23
- 20.##.3.42:23
- 20#.##1.47.202:23
- 11#.##.107.154:23
- 10#.#.217.58:23
- 9.##.76.160:23
- 18#.#6.67.59:23
- 47.##.250.132:23
- 35.###.230.27:23
- 14#.##1.204.75:23
- 17#.##6.71.229:23
- 18#.##.233.190:23
- 48.##1.97.44:23
- 60.##.61.201:23
- 57.##6.31.85:23
- 21#.#2.196.3:23
- 19#.##3.196.187:23
- 17#.##.228.175:23
- 20.##.241.184:23
- 21#.##5.199.151:23
- 20#.#53.58.5:23
- 71.###.216.207:23
- 99.###.142.31:23
- 16#.##.69.124:23
- 83.###.242.225:23
- 12#.##6.99.214:23
- 66.###.42.226:23
- 19#.##3.197.94:23
- 85.###.246.186:23
- 88.###.204.188:23
- 16#.##.206.40:23
- 85.##.45.41:23
- 16#.##0.249.101:23
- 11#.##7.47.36:23
- 20#.##6.58.197:23
- 48.###.51.186:23
- 20#.##7.227.224:23
- 5.###.55.209:23
- 78.###.151.98:23
- 65.##.128.21:23
- 13#.##6.155.154:23
- 13#.##9.55.242:23
- 31.##.204.154:23
- 16#.##.152.159:23
- 11#.##.69.248:23
- 9.##.70.44:23
- 15#.##.152.253:23
- 39.###.120.223:23
- 27.##.108.144:23
- 19#.##3.112.209:23
- 2.###.237.138:23
- 53.##3.93.82:23
- 90.##4.35.3:23
- 14#.##.137.146:23
- 34.###.15.180:23
- 24.###.247.101:23
- 95.###.62.182:23
- 2.###.139.0:23
- 19#.#7.98.39:23
- 12#.#40.8.52:23
- 66.##.218.202:23
- 18.###.43.150:23
- 46.###.193.209:23
- 16#.##.63.233:23
- 11#.#8.7.188:23
- 24.##.231.129:23
- 72.##.32.253:23
- 59.###.110.136:23
- 21#.#2.24.80:23
- 75.##.254.109:23
- 12#.##2.59.54:23
- 98.##5.53.43:23
- 66.##.163.11:23
- 93.##.176.225:23
- 14.###.102.59:23
- 75.###.230.149:23
- 16#.##2.28.210:23
- 46.###.247.201:23
- 93.###.86.224:23
- 24.###.200.206:23
- 93.##.229.108:23
- 15#.##.198.86:23
- 61.###.49.205:23
- 68.###.228.143:23
- 10#.##.148.76:23
- 15#.##.142.186:23
- 17#.##.121.187:23
- 12#.##.181.189:23
- 66.##.167.253:23
- 20#.##4.71.60:23
- 17.##.124.248:23
- 17.###.107.10:23
- 14#.##7.76.88:23
- 14#.##.223.203:23
- 96.##.102.178:23
- 40.###.113.95:23
- 89.##.22.134:23
- 20#.##.209.56:23
- 12#.##0.31.252:23
- 12#.##3.20.229:23
- 14#.##0.47.123:23
- 11#.#7.7.28:23
- 64.##7.98.44:23
- 85.##1.59.72:23
- 22#.##3.92.183:23
- 21#.##3.140.200:23
- 15#.##7.186.108:23
- 15#.##.63.211:23
- 48.###.147.232:23
- 11#.##7.228.233:23
- 90.###.142.215:23
- 10#.##.61.141:23
- 19#.##9.17.243:23
- 10#.#6.77.15:23
- 75.#.68.214:23
- 87.##5.61.38:23
- 16#.##0.111.112:23
- 57.###.89.163:23
- 12#.##.173.181:23
- 20#.##0.22.24:23
- 5.##.145.162:23
- 21#.##6.201.61:23
- 15#.##2.120.52:23
- 10#.##4.201.236:23
- 10#.##8.74.52:23
- 16#.##9.98.117:23
- 95.###.176.242:23
- 98.##8.78.12:23
- 10#.##.233.76:23
- 19#.##4.178.213:23
- 11#.#.78.163:23
- 18#.##8.137.52:23
- 12#.##8.209.202:23
- 11#.##0.110.153:23
- 70.###.35.125:23
- 18#.##9.89.180:23
- 14#.##5.2.208:23
- 12#.##9.14.44:23
- 11#.##8.12.83:23
- 14#.##.144.217:23
- 24.##5.238.4:23
- 18#.##5.232.190:23
- 70.###.183.201:23
- 20#.#74.5.35:23
- 11#.##8.133.242:23
- 27.##.14.134:23
- 76.###.130.212:23
- 95.##1.8.57:23
- 89.###.161.202:23
- 11#.##8.250.112:23
- 98.##.157.74:23
- 16#.##.185.196:23
- 17.##.235.218:23
- 92.##8.57.3:23
- 46.###.134.214:23
- 10#.##0.162.132:23
- 81.##.76.11:23
- 16#.##2.59.230:23
- 18#.##3.233.172:23
- 14#.##.188.176:23
- 13#.##6.209.202:23
- 87.##.248.101:23
- 77.###.26.162:23
- 11#.##.235.223:23
- 20#.#27.83.9:23
- 41.##.109.38:23
- 90.###.187.176:23
- 94.###.180.99:23
- 40.##.112.45:23
- 32.###.18.225:23
- 18#.#04.3.45:23
- 21#.##3.34.235:23
- 5.###.65.51:23
- 14.##5.5.126:23
- 14#.##4.236.24:23
- 10#.#0.63.60:23
- 17#.##9.6.157:23
- 20#.##.121.52:23
- 22#.##1.15.119:23
- 10#.##6.230.246:23
- 87.##.138.114:23
- 20#.##3.203.69:23
- 15#.##.213.117:23
- 14#.##8.241.189:23
- 20.###.174.74:23
- 14#.##8.13.219:23
- 66.##.121.93:23
- 12#.##7.127.193:23
- 17#.#1.31.81:23
- 15#.##3.98.28:23
- 16#.#.253.164:23
- 17#.##.112.79:23
- 20#.##2.97.65:23
- 20#.##3.183.123:23
- 17#.##.227.108:23
- 12.###.68.249:23
- 19#.##7.117.94:23
- 18#.##9.112.68:23
- 15#.##.162.129:23
- 19#.##9.89.127:23
- 4.###.200.2:23
- 70.##6.82.60:23
- 34.###.107.83:23
- 35.##.96.65:23
- 21#.#.142.241:23
- 11#.##6.250.146:23
- 16#.##1.144.54:23
- 16#.##9.249.39:23
- 69.##.206.237:23
- 74.###.154.235:23
- 86.##.10.170:23
- 38.##.235.60:23
- 68.##.181.230:23
- 10#.#1.85.38:23
- 16#.#3.21.79:23
- 45.###.178.154:23
- 17#.##0.44.129:23
- 59.##.130.22:23
- 20#.#5.153.2:23
- 59.###.25.250:23
- 20#.##.117.247:23
- 31.##.238.136:23
- 47.###.123.135:23
- 12#.##5.221.122:23
- 20#.#3.65.13:23
- 12#.##0.187.71:23
- 5.###.91.209:23
- 57.##4.0.89:23
- 15#.##.41.152:23
- 2.##.244.35:23
- 20#.##6.77.51:23
- 13#.##3.160.161:23
- 84.#.37.51:23
- 15#.##9.47.225:23
- 71.##.6.152:23
- 12#.##.217.158:23
- 46.###.175.21:23
- 66.##.57.234:23
- 12.##.18.113:23
- 73.##.66.133:23
- 16#.##7.69.117:23
- 11#.##.145.119:23
- 10#.##1.200.198:23
- 13#.##2.27.248:23
- 18#.##7.36.92:23
- 19#.##.244.157:23
- 10#.##8.128.208:23
- 15#.##.251.151:23
- 18#.##4.140.110:23
- 39.###.16.130:23
- 14#.##.113.137:23
- 87.###.61.100:23
- 19#.#0.47.73:23
- 19#.##.127.225:23
- 42.###.170.182:23
- 12#.##6.222.227:23
- 14.###.64.166:23
- 14#.##5.251.134:23
- 17.###.236.22:23
- 16#.##3.64.129:23
- 78.###.252.53:23
- 13#.##.240.57:23
- 24.##.102.44:23
- 14#.#.82.26:23
- 16#.#.171.149:23
- 12#.##3.22.135:23
- 12#.##7.214.214:23
- 16#.##4.180.71:23
- 84.###.40.212:23
- 17#.#5.205.8:23
- 83.##.253.147:23
- 95.##.177.221:23
- 34.##2.45.86:23
- 10#.##4.53.133:23
- 70.##0.212.7:23
- 71.##.212.253:23
- 12#.##8.83.154:23
- 15#.##1.37.128:23
- 21#.##8.143.181:23
- 19#.##6.242.112:23
- 21#.##7.15.125:23
- 11#.##.232.65:23
- 19#.##.90.139:23
- 16#.##.162.122:23
- 72.##.82.192:23
- 19#.##7.198.51:23
- 21#.##4.136.175:23
- 32.##.97.133:23
- 8.###.232.124:23
- 88.##.146.99:23
- 22#.##.35.194:23
- 76.###.74.229:23
- 62.###.123.193:23
- 59.###.211.22:23
- 17#.#1.188.6:23
- 65.##9.73.46:23
- 60.##.52.157:23
- 15#.##.39.101:23
- 22#.##8.207.33:23
- 36.##.127.146:23
- 14#.##4.81.93:23
- 48.###.113.211:23
- 14#.##0.224.15:23
- 77.##.221.245:23
- 46.##4.64.55:23
- 77.###.148.88:23
- 16#.##.126.41:23
- 1.###.140.194:23
- 12#.##.171.27:23
- 18#.##2.162.221:23
- 17#.##4.47.159:23
- 20#.##8.92.171:23
- 11#.#1.194.4:23
- 11#.##7.136.102:23
- 10#.##9.160.142:23
- 19#.##0.2.228:23
- 10#.##4.210.41:23
- 16#.##8.162.251:23
- 20#.#2.11.66:23
- 16#.##.24.193:23
- 14#.#.182.111:23
- 17#.##4.71.60:23
- 19#.##3.33.226:23
- 97.###.120.18:23
- 11#.##3.147.98:23
- 14#.##8.236.19:23
- 98.###.239.81:23
- 9.###.12.92:23
- 96.##7.71.18:23
- 74.##.41.137:23
- 36.##.23.174:23
- 21#.##.53.172:23
- 92.###.130.150:23
- 11#.#76.2.67:23
- 9.###.154.73:23
- 44.##.111.169:23
- 21#.##3.183.54:23
- 14#.##.33.192:23
- 11#.##3.194.12:23
- 17#.##6.72.33:23
- 97.##.18.142:23
- 16#.##.123.181:23
- 10#.##.209.67:23
- 12#.##.72.244:23
- 20#.##4.73.120:23
- 14#.#.23.219:23
- 10#.##4.39.18:23
- 21#.##7.169.16:23
- 82.###.122.229:23
- 21#.##.159.173:23
- 10#.##3.239.5:23
- 11#.##.200.197:23
- 67.#.115.104:23
- 11#.##.122.71:23
- 11#.##.90.176:23
- 77.###.237.118:23
- 11#.##.211.235:23
- 20#.##4.17.214:23
- 46.##.130.229:23
- 17#.#7.60.77:23
- 37.###.87.234:23
- 19#.##4.70.47:23
- 18#.##8.156.146:23
- 17#.##7.207.222:23
- 68.##.169.72:23
- 20#.##0.174.144:23
- 14#.##8.250.27:23
- 17#.##0.151.8:23
- 60.###.53.179:23
- 96.###.242.72:23
- 10#.##9.26.186:23
- 11#.#04.5.40:23
- 99.##.116.246:23
- 84.##1.92.98:23
- 60.###.160.31:23
- 1.##.210.149:23
- 19#.##1.14.55:23
- 48.###.185.39:23
- 57.###.210.215:23
- 14#.##.69.100:23
- 21#.##.221.162:23
- 83.##.186.89:23
- 20#.##1.234.111:23
- 27.###.254.118:23
- 14#.#9.33.91:23
- 98.##.219.235:23
- 4.###.198.45:23
- 20#.##4.127.140:23
- 22#.##2.235.47:23
- 20#.##.87.161:23
- 16#.##4.110.132:23
- 17#.##6.73.51:23
- 18#.##9.154.38:23
- 82.##.229.54:23
- 13#.##8.214.16:23
Receives data from the following servers:
- 80.###.97.49:18321