Technical Information
Malicious functions:
Launches itself as a daemon
Substitutes application name for:
Network activity:
Awaits incoming connections on ports:
- 127.0.0.1:11133
Establishes connection:
- 68.###.77.164:1166
- 8.#.8.8:53
Attacks using a special dictionary (brute-force technique) via the Telnet protocol.
Sends data to the following servers:
- 2.##.#4.200:2323
- 11#.##8.81.16:2323
- 13#.#.229.235:2323
- 37.###.194.206:2323
- 12#.##3.69.4:2323
- 68.##.234.229:2323
- 10#.##5.148.2:2323
- 68.###.77.164:1166
- 51.###.90.154:2323
- 19#.##.206.117:2323
- 65.###.97.59:2323
- 80.###.58.81:2323
- 12#.##.161.254:2323
- 51.###.162.174:2323
- 27.###.191.61:2323
- 19#.##.140.119:2323
- 16#.##0.125.11:2323
- 99.###.25.154:2323
- 15#.##0.239.79:2323
- 14#.##.60.115:2323
- 22#.##9.42.214:2323
- 14.###.188.244:2323
- 21#.##.3.84:2323
- 10#.##8.72.124:2323
- 12#.##.4.140:2323
- 11#.###.172.106:2323
- 12#.###.238.240:2323
- 63.###.252.156:2323
- 31.###.226.178:2323
- 11#.##7.65.58:2323
- 93.###.88.139:2323
- 16#.##.138.55:2323
- 19#.###.202.166:2323
- 80.###.204.152:2323
- 13#.###.151.219:2323
- 71.###.174.135:2323
- 21#.##.69.151:2323
- 82.###.151.123:2323
- 14#.##.211.121:2323
- 22#.##4.153.35:2323
- 16#.###.104.162:2323
- 64.###.64.93:2323
- 10#.###.201.184:2323
- 1.###.198.25:2323
- 12#.###.250.106:2323
- 14#.###.189.213:2323
- 13#.###.237.223:2323
- 44.##.235.173:2323
- 12.###.43.40:2323
- 19#.##2.254.82:2323
- 15#.##7.152.61:2323
- 79.##.142.19:2323
- 10#.##.183.17:2323
- 10#.##.104.145:2323
- 77.###.83.242:2323
- 16#.##.219.209:2323
- 18#.##1.120.59:2323
- 2.##.22.85:2323
- 27.###.172.241:2323
- 11#.###.101.104:2323
- 12#.##0.209.92:2323
- 20#.##.94.85:2323
- 17#.##3.51.69:2323
- 21#.##.214.180:2323
- 99.###.79.213:2323
- 17.###.124.93:2323
- 16#.##5.53.207:2323
- 22#.##6.33.201:2323
- 19#.##.41.224:2323
- 12#.###.124.203:2323
- 19#.##3.2.89:2323
- 91.###.90.210:2323
- 76.##.80.33:2323
- 21#.##.28.210:2323
- 20#.###.147.121:2323
- 54.##.67.194:2323
- 16#.#.25.110:2323
- 20#.##.202.112:2323
- 88.###.5.94:2323
- 16#.##.77.4:2323
- 18#.##.168.227:2323
- 19#.###.122.243:2323
- 18.###.80.170:2323
- 13#.##.73.37:2323
- 16#.##9.94.229:2323
- 18#.##.202.1:2323
- 9.###.100.128:2323
- 15#.##8.217.17:2323
- 21#.##0.16.236:2323
- 17#.##6.128.26:2323
- 17#.##.109.92:2323
- 21#.##0.15.163:2323
- 13#.##.238.187:2323
- 15#.##.62.102:2323
- 11#.##0.39.210:2323
- 15#.##.223.213:2323
- 15#.##.232.18:2323
- 8.##.#5.230:2323
- 11#.##.17.192:2323
- 23.###.89.4:2323
- 68.###.176.221:2323
- 11#.##8.27.1:2323
- 14#.##9.48.117:2323
- 13#.###.219.244:2323
- 13#.##.188.187:2323
- 20#.##.90.42:2323
- 19#.##.96.166:2323
- 16#.##.198.144:2323
- 14#.###.248.218:2323
- 20#.##9.171.98:2323
- 89.###.129.206:2323
- 13#.##6.114.42:2323
- 14.##.53.163:2323
- 12#.#.39.8:2323
- 16#.##.245.13:2323
- 86.##.246.136:2323
- 21#.##.16.136:2323
- 81.##.210.229:2323
- 21#.##9.64.62:2323
- 4.##.15.99:2323
- 16#.###.227.173:2323
- 50.###.22.60:2323
- 14#.##.28.227:2323
- 10#.##.180.158:2323
- 66.###.213.130:2323
- 11#.##3.131.18:2323
- 17#.##.235.75:2323
- 13#.##.148.162:2323
- 76.##.69.249:2323
- 45.###.45.32:2323
- 14#.#.80.3:2323
- 16#.##.215.37:2323
- 13#.##1.144.24:2323
- 12#.###.109.203:2323
- 20#.###.114.249:2323
- 20#.##.120.127:2323
- 73.##.152.115:2323
- 12#.##.129.96:2323
- 19#.##0.101.0:2323
- 13#.##4.16.74:2323
- 61.###.125.29:2323
- 11#.##9.21.191:2323
- 9.###.188.132:2323
- 16#.##.58.58:2323
- 16#.##5.164.55:2323
- 14#.##.166.99:2323
- 85.##.88.21:2323
- 17#.##2.99.82:2323
- 22#.##.112.162:2323
- 17.###.216.76:2323
- 60.##.155.83:2323
- 17.###.140.98:2323
- 80.###.164.172:2323
- 14#.##.34.3:2323
- 22#.##0.24.83:2323
- 11#.##7.11.118:2323
- 11#.##1.208.10:2323
- 81.#.#5.204:2323
- 14.##.6.225:2323
- 11#.###.234.104:2323
- 13.###.100.194:2323
- 13#.##2.95.179:2323
- 15#.##.53.250:2323
- 21#.##3.55.238:2323
- 16#.##.96.223:2323
- 14#.##7.205.13:2323
- 21#.###.201.189:2323
- 67.##.189.10:2323
- 18#.###.127.148:2323
- 16#.##.218.5:2323
- 22#.##7.51.189:2323
- 46.###.57.128:2323
- 16#.##7.177.19:2323
- 12.###.241.133:2323
- 32.###.46.144:2323
- 18#.###.138.117:2323
- 19#.###.235.118:2323
- 16#.##5.178.61:2323
- 66.##.56.148:2323
- 51.##.130.34:2323
- 13#.###.163.176:2323
- 11#.##3.34.27:2323
- 16#.#.216.246:2323
- 32.##.175.2:2323
- 1.###.159.214:2323
- 22#.###.165.172:2323
- 22#.###.193.221:2323
- 17#.##.162.254:2323
- 88.###.244.160:2323
- 87.##.34.103:2323
- 59.##.53.94:2323
- 21#.###.187.169:2323
- 10#.##.28.228:2323
- 16#.##.116.89:2323
- 18#.##.62.246:2323
- 18#.##.175.63:2323
- 20#.##1.114.24:2323
- 11#.##.149.48:2323
- 80.###.24.41:2323
- 4.#.##8.245:2323
- 12#.##5.3.36:2323
- 20#.##.197.99:2323
- 14#.##6.57.87:2323
- 15#.##.209.58:2323
- 17#.##.250.158:2323
- 11#.##.99.206:2323
- 20#.##1.74.232:2323
- 24.###.247.213:2323
- 19#.###.213.142:2323
- 68.###.75.215:2323
- 97.##.52.83:2323
- 11#.##.97.154:2323
- 66.###.227.0:2323
- 46.###.44.46:2323
- 70.###.214.156:2323
- 17.##.65.139:2323
- 75.###.12.13:2323
- 44.###.74.42:2323
- 16#.##.230.182:2323
- 91.###.53.36:2323
- 14#.##8.165.42:2323
- 10#.##.169.126:2323
- 15#.#.179.246:2323
- 16#.###.233.101:2323
- 10#.##9.1.165:2323
- 10#.##5.56.103:2323
- 24.##.38.206:2323
- 38.##.22.245:2323
- 13#.##.245.129:2323
- 58.##.157.75:2323
- 11#.##1.132.87:2323
- 13#.##.186.159:2323
- 36.##.36.59:2323
- 95.###.80.194:2323
- 99.###.130.84:2323
- 17#.###.255.114:2323
- 45.###.61.139:2323
- 46.###.180.199:2323
- 79.###.7.116:2323
- 51.###.238.216:2323
- 83.##.78.157:2323
- 13#.##.213.166:2323
- 52.###.243.206:2323
- 12.###.99.50:2323
- 35.###.143.168:2323
- 10#.##1.80.171:2323
- 15#.##.238.241:2323
- 60.##.9.177:2323
- 17#.###.125.136:2323
- 13#.##.71.242:2323
- 34.###.146.53:2323
- 46.###.99.218:2323
- 17#.##.156.9:2323
- 17#.###.221.194:2323
- 17.###.81.104:2323
- 13#.##7.124.72:2323
- 74.###.61.154:2323
- 17#.##.34.204:2323
- 14#.##6.10.209:2323
- 11#.##.107.116:2323
- 98.###.22.86:2323
- 75.###.40.170:2323
- 67.###.227.102:2323
- 79.###.156.244:2323
- 8.###.113.78:2323
- 13#.##4.61.171:2323
- 16#.##.82.167:2323
- 52.###.68.229:2323
- 15#.##2.154.37:2323
- 18#.##7.87.189:2323
- 34.##.33.194:2323
- 22#.###.210.119:2323
- 11#.##8.180.11:2323
- 12#.##.138.219:2323
- 20#.###.189.138:2323
- 74.###.112.204:2323
- 17#.##5.149.70:2323
- 17#.##.232.234:2323
- 92.###.131.165:2323
- 84.###.71.170:2323
- 1.###.196.86:2323
- 67.###.52.111:2323
- 19#.##.218.63:2323
- 16#.###.187.179:2323
- 17#.##5.61.175:2323
- 98.###.175.25:2323
- 17#.#.236.44:2323
- 22#.##3.47.244:2323
- 19.###.162.250:2323
- 37.##.128.190:2323
- 17#.##0.121.85:23
- 16#.##5.153.116:23
- 11#.##.192.215:23
- 11#.##.48.219:23
- 13#.##6.2.224:23
- 64.###.229.162:23
- 16#.##.204.149:23
- 72.###.130.139:23
- 27.##.57.232:23
- 88.##.241.108:2323
- 57.###.188.104:23
- 5.###.34.92:23
- 18#.##.157.189:23
- 83.##.225.48:23
- 67.###.85.236:23
- 10#.##9.155.18:23
- 21#.##9.176.163:23
- 32.###.75.100:23
- 16#.##5.220.65:23
- 19#.##.156.123:2323
- 14#.##.173.138:23
- 18#.##5.19.34:23
- 71.###.240.26:23
- 21#.##6.92.226:23
- 17#.##4.51.189:23
- 22#.##6.13.204:23
- 17#.##1.70.196:23
- 80.##9.89.44:23
- 13#.##3.32.237:23
- 13#.###.142.140:2323
- 21#.##.144.75:23
- 92.###.154.94:23
- 15#.##.17.123:23
- 14#.##.19.200:23
- 62.##9.87.85:23
- 76.##.110.190:23
- 63.##.140.182:23
- 18#.##8.170.197:23
- 18#.##.97.249:23
- 21#.###.150.144:2323
- 21#.##.173.56:23
- 16#.##9.134.211:23
- 11#.##.246.95:23
- 10#.##5.34.204:23
- 9.##.212.150:23
- 18#.##2.72.157:23
- 17#.#4.50.43:23
- 16#.##9.202.98:23
- 10#.##6.243.198:23
- 20#.##.179.2:2323
- 13#.##9.14.85:23
- 61.###.14.122:23
- 12#.##2.251.143:23
- 14#.##.250.13:23
- 17#.##4.109.135:23
- 14#.#.125.170:23
- 10#.##.92.122:23
- 93.##.179.160:23
- 5.#.#11.48:23
- 10#.###.163.237:2323
- 60.##5.85.15:23
- 13#.##7.189.247:23
- 10#.##7.150.133:23
- 19#.##0.84.150:23
- 15#.##0.188.105:23
- 36.###.134.87:23
- 16#.##0.253.184:23
- 77.##3.98.55:23
- 80.##4.10.27:23
- 13#.##.203.215:2323
- 14#.##6.231.223:23
- 20#.##9.61.181:23
- 15#.#.231.253:23
- 64.##.234.183:23
- 12#.#.157.199:23
- 18#.#0.61.27:23
- 17#.##2.127.39:23
- 14.##.5.195:23
- 92.###.64.246:23
- 18#.#.168.110:2323
- 79.###.253.166:23
- 20#.##.177.40:23
- 14#.##4.55.27:23
- 20#.##8.108.238:23
- 11#.##.67.154:23
- 20#.##.43.212:23
Receives data from the following servers:
- 68.###.77.164:1166