Linux.Siggen.1684

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

uJORZUjtfPDsbBa03D3488O5F2gG

Network activity:

Awaits incoming connections on ports:

0.0.0.0:23
0.0.0.0:22
0.0.0.0:443
0.0.0.0:81
0.0.0.0:8080

Establishes connection:

8.#.8.8:53
80.###.97.49:18321

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

Sends data to the following servers:

14#.#3.31.54:23
13#.##4.118.194:23
15#.##.211.211:23
77.###.214.97:23
99.##.48.70:23
12#.##.21.149:23
48.###.159.181:23
82.#.222.87:23
89.###.125.43:23
85.###.109.78:23
11#.##6.86.197:23
20#.##9.144.122:23
17#.##2.209.24:23
47.##.47.122:23
9.###.132.172:23
42.##8.74.80:23
44.##.22.221:23
60.##.106.185:23
98.###.85.206:23
10#.##1.7.127:23
14#.##9.210.191:23
76.##9.31.11:23
19#.##4.33.73:23
1.###.245.48:23
13#.#.8.240:23
19#.#3.28.88:23
36.##4.73.82:23
32.##.29.227:23
19#.##3.100.227:23
65.#.216.87:23
20#.##.122.42:23
90.##.232.135:23
17#.#2.5.178:23
76.##.78.143:23
10#.##5.77.226:23
9.###.17.128:23
82.##.142.41:23
91.###.142.212:23
20#.##2.15.137:23
16#.##.147.228:23
70.###.66.190:23
90.##4.0.46:23
15#.##0.168.249:23
12#.##4.153.7:23
13#.##.84.245:23
57.###.109.38:23
21#.##3.125.248:23
40.##0.50.4:23
95.###.97.161:23
19#.##0.189.178:23
20.##.3.42:23
20#.##1.47.202:23
11#.##.107.154:23
10#.#.217.58:23
9.##.76.160:23
18#.#6.67.59:23
47.##.250.132:23
35.###.230.27:23
14#.##1.204.75:23
17#.##6.71.229:23
18#.##.233.190:23
48.##1.97.44:23
60.##.61.201:23
57.##6.31.85:23
21#.#2.196.3:23
19#.##3.196.187:23
17#.##.228.175:23
20.##.241.184:23
21#.##5.199.151:23
20#.#53.58.5:23
71.###.216.207:23
99.###.142.31:23
16#.##.69.124:23
83.###.242.225:23
12#.##6.99.214:23
66.###.42.226:23
19#.##3.197.94:23
85.###.246.186:23
88.###.204.188:23
16#.##.206.40:23
85.##.45.41:23
16#.##0.249.101:23
11#.##7.47.36:23
20#.##6.58.197:23
48.###.51.186:23
20#.##7.227.224:23
5.###.55.209:23
78.###.151.98:23
65.##.128.21:23
13#.##6.155.154:23
13#.##9.55.242:23
31.##.204.154:23
16#.##.152.159:23
11#.##.69.248:23
9.##.70.44:23
15#.##.152.253:23
39.###.120.223:23
27.##.108.144:23
19#.##3.112.209:23
2.###.237.138:23
53.##3.93.82:23
90.##4.35.3:23
14#.##.137.146:23
34.###.15.180:23
24.###.247.101:23
95.###.62.182:23
2.###.139.0:23
19#.#7.98.39:23
12#.#40.8.52:23
66.##.218.202:23
18.###.43.150:23
46.###.193.209:23
16#.##.63.233:23
11#.#8.7.188:23
24.##.231.129:23
72.##.32.253:23
59.###.110.136:23
21#.#2.24.80:23
75.##.254.109:23
12#.##2.59.54:23
98.##5.53.43:23
66.##.163.11:23
93.##.176.225:23
14.###.102.59:23
75.###.230.149:23
16#.##2.28.210:23
46.###.247.201:23
93.###.86.224:23
24.###.200.206:23
93.##.229.108:23
15#.##.198.86:23
61.###.49.205:23
68.###.228.143:23
10#.##.148.76:23
15#.##.142.186:23
17#.##.121.187:23
12#.##.181.189:23
66.##.167.253:23
20#.##4.71.60:23
17.##.124.248:23
17.###.107.10:23
14#.##7.76.88:23
14#.##.223.203:23
96.##.102.178:23
40.###.113.95:23
89.##.22.134:23
20#.##.209.56:23
12#.##0.31.252:23
12#.##3.20.229:23
14#.##0.47.123:23
11#.#7.7.28:23
64.##7.98.44:23
85.##1.59.72:23
22#.##3.92.183:23
21#.##3.140.200:23
15#.##7.186.108:23
15#.##.63.211:23
48.###.147.232:23
11#.##7.228.233:23
90.###.142.215:23
10#.##.61.141:23
19#.##9.17.243:23
10#.#6.77.15:23
75.#.68.214:23
87.##5.61.38:23
16#.##0.111.112:23
57.###.89.163:23
12#.##.173.181:23
20#.##0.22.24:23
5.##.145.162:23
21#.##6.201.61:23
15#.##2.120.52:23
10#.##4.201.236:23
10#.##8.74.52:23
16#.##9.98.117:23
95.###.176.242:23
98.##8.78.12:23
10#.##.233.76:23
19#.##4.178.213:23
11#.#.78.163:23
18#.##8.137.52:23
12#.##8.209.202:23
11#.##0.110.153:23
70.###.35.125:23
18#.##9.89.180:23
14#.##5.2.208:23
12#.##9.14.44:23
11#.##8.12.83:23
14#.##.144.217:23
24.##5.238.4:23
18#.##5.232.190:23
70.###.183.201:23
20#.#74.5.35:23
11#.##8.133.242:23
27.##.14.134:23
76.###.130.212:23
95.##1.8.57:23
89.###.161.202:23
11#.##8.250.112:23
98.##.157.74:23
16#.##.185.196:23
17.##.235.218:23
92.##8.57.3:23
46.###.134.214:23
10#.##0.162.132:23
81.##.76.11:23
16#.##2.59.230:23
18#.##3.233.172:23
14#.##.188.176:23
13#.##6.209.202:23
87.##.248.101:23
77.###.26.162:23
11#.##.235.223:23
20#.#27.83.9:23
41.##.109.38:23
90.###.187.176:23
94.###.180.99:23
40.##.112.45:23
32.###.18.225:23
18#.#04.3.45:23
21#.##3.34.235:23
5.###.65.51:23
14.##5.5.126:23
14#.##4.236.24:23
10#.#0.63.60:23
17#.##9.6.157:23
20#.##.121.52:23
22#.##1.15.119:23
10#.##6.230.246:23
87.##.138.114:23
20#.##3.203.69:23
15#.##.213.117:23
14#.##8.241.189:23
20.###.174.74:23
14#.##8.13.219:23
66.##.121.93:23
12#.##7.127.193:23
17#.#1.31.81:23
15#.##3.98.28:23
16#.#.253.164:23
17#.##.112.79:23
20#.##2.97.65:23
20#.##3.183.123:23
17#.##.227.108:23
12.###.68.249:23
19#.##7.117.94:23
18#.##9.112.68:23
15#.##.162.129:23
19#.##9.89.127:23
4.###.200.2:23
70.##6.82.60:23
34.###.107.83:23
35.##.96.65:23
21#.#.142.241:23
11#.##6.250.146:23
16#.##1.144.54:23
16#.##9.249.39:23
69.##.206.237:23
74.###.154.235:23
86.##.10.170:23
38.##.235.60:23
68.##.181.230:23
10#.#1.85.38:23
16#.#3.21.79:23
45.###.178.154:23
17#.##0.44.129:23
59.##.130.22:23
20#.#5.153.2:23
59.###.25.250:23
20#.##.117.247:23
31.##.238.136:23
47.###.123.135:23
12#.##5.221.122:23
20#.#3.65.13:23
12#.##0.187.71:23
5.###.91.209:23
57.##4.0.89:23
15#.##.41.152:23
2.##.244.35:23
20#.##6.77.51:23
13#.##3.160.161:23
84.#.37.51:23
15#.##9.47.225:23
71.##.6.152:23
12#.##.217.158:23
46.###.175.21:23
66.##.57.234:23
12.##.18.113:23
73.##.66.133:23
16#.##7.69.117:23
11#.##.145.119:23
10#.##1.200.198:23
13#.##2.27.248:23
18#.##7.36.92:23
19#.##.244.157:23
10#.##8.128.208:23
15#.##.251.151:23
18#.##4.140.110:23
39.###.16.130:23
14#.##.113.137:23
87.###.61.100:23
19#.#0.47.73:23
19#.##.127.225:23
42.###.170.182:23
12#.##6.222.227:23
14.###.64.166:23
14#.##5.251.134:23
17.###.236.22:23
16#.##3.64.129:23
78.###.252.53:23
13#.##.240.57:23
24.##.102.44:23
14#.#.82.26:23
16#.#.171.149:23
12#.##3.22.135:23
12#.##7.214.214:23
16#.##4.180.71:23
84.###.40.212:23
17#.#5.205.8:23
83.##.253.147:23
95.##.177.221:23
34.##2.45.86:23
10#.##4.53.133:23
70.##0.212.7:23
71.##.212.253:23
12#.##8.83.154:23
15#.##1.37.128:23
21#.##8.143.181:23
19#.##6.242.112:23
21#.##7.15.125:23
11#.##.232.65:23
19#.##.90.139:23
16#.##.162.122:23
72.##.82.192:23
19#.##7.198.51:23
21#.##4.136.175:23
32.##.97.133:23
8.###.232.124:23
88.##.146.99:23
22#.##.35.194:23
76.###.74.229:23
62.###.123.193:23
59.###.211.22:23
17#.#1.188.6:23
65.##9.73.46:23
60.##.52.157:23
15#.##.39.101:23
22#.##8.207.33:23
36.##.127.146:23
14#.##4.81.93:23
48.###.113.211:23
14#.##0.224.15:23
77.##.221.245:23
46.##4.64.55:23
77.###.148.88:23
16#.##.126.41:23
1.###.140.194:23
12#.##.171.27:23
18#.##2.162.221:23
17#.##4.47.159:23
20#.##8.92.171:23
11#.#1.194.4:23
11#.##7.136.102:23
10#.##9.160.142:23
19#.##0.2.228:23
10#.##4.210.41:23
16#.##8.162.251:23
20#.#2.11.66:23
16#.##.24.193:23
14#.#.182.111:23
17#.##4.71.60:23
19#.##3.33.226:23
97.###.120.18:23
11#.##3.147.98:23
14#.##8.236.19:23
98.###.239.81:23
9.###.12.92:23
96.##7.71.18:23
74.##.41.137:23
36.##.23.174:23
21#.##.53.172:23
92.###.130.150:23
11#.#76.2.67:23
9.###.154.73:23
44.##.111.169:23
21#.##3.183.54:23
14#.##.33.192:23
11#.##3.194.12:23
17#.##6.72.33:23
97.##.18.142:23
16#.##.123.181:23
10#.##.209.67:23
12#.##.72.244:23
20#.##4.73.120:23
14#.#.23.219:23
10#.##4.39.18:23
21#.##7.169.16:23
82.###.122.229:23
21#.##.159.173:23
10#.##3.239.5:23
11#.##.200.197:23
67.#.115.104:23
11#.##.122.71:23
11#.##.90.176:23
77.###.237.118:23
11#.##.211.235:23
20#.##4.17.214:23
46.##.130.229:23
17#.#7.60.77:23
37.###.87.234:23
19#.##4.70.47:23
18#.##8.156.146:23
17#.##7.207.222:23
68.##.169.72:23
20#.##0.174.144:23
14#.##8.250.27:23
17#.##0.151.8:23
60.###.53.179:23
96.###.242.72:23
10#.##9.26.186:23
11#.#04.5.40:23
99.##.116.246:23
84.##1.92.98:23
60.###.160.31:23
1.##.210.149:23
19#.##1.14.55:23
48.###.185.39:23
57.###.210.215:23
14#.##.69.100:23
21#.##.221.162:23
83.##.186.89:23
20#.##1.234.111:23
27.###.254.118:23
14#.#9.33.91:23
98.##.219.235:23
4.###.198.45:23
20#.##4.127.140:23
22#.##2.235.47:23
20#.##.87.161:23
16#.##4.110.132:23
17#.##6.73.51:23
18#.##9.154.38:23
82.##.229.54:23
13#.##8.214.16:23

Receives data from the following servers:

80.###.97.49:18321

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations