マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Linux.Siggen.7208

Added to the Dr.Web virus database: 2024-04-19

Virus description added:

Technical Information

Malicious functions:
Launches itself as a daemon
Substitutes application name for:
  • e28081
Network activity:
Awaits incoming connections on ports:
  • 127.0.0.1:33337
Establishes connection:
  • 8.#.8.8:53
  • 45.###.232.208:33335
Attacks using a special dictionary (brute-force technique) via the Telnet protocol.
DNS ASK:
  • ro##me.xyz
Sends data to the following servers:
  • 45.###.232.208:33335
  • 96.##.9.119:23
  • 18#.##.136.48:23
  • 20#.##4.253.127:23
  • 10#.##9.105.126:23
  • 59.##1.10.83:23
  • 20#.##.90.240:23
  • 27.###.118.250:23
  • 78.#.44.140:23
  • 19#.##.89.107:23
  • 92.##.55.113:23
  • 17#.##.14.247:23
  • 53.##.141.215:23
  • 18#.##7.102.218:23
  • 17.##.65.84:23
  • 23#.##6.15.248:23
  • 17#.##6.192.127:23
  • 17#.##5.161.66:23
  • 15#.##5.110.131:23
  • 24#.##1.198.228:23
  • 17.##6.6.35:23
  • 66.###.113.169:23
  • 25#.##9.235.236:23
  • 19#.##1.87.118:23
  • 75.###.70.255:23
  • 23#.##9.197.38:23
  • 19#.##7.59.44:23
  • 17.##.194.107:23
  • 18#.##0.225.7:23
  • 70.###.209.142:23
  • 22#.##1.33.232:23
  • 80.##.152.11:23
  • 55.##.142.246:23
  • 35.###.212.105:23
  • 75.###.219.71:23
  • 39.###.173.22:23
  • 17#.##9.29.83:23
  • 16#.##4.166.133:23
  • 86.#.172.9:23
  • 21#.##7.225.72:23
  • 15#.##.252.135:23
  • 45.##.166.174:23
  • 22#.##5.41.255:23
  • 17#.#.84.118:23
  • 50.###.73.110:23
  • 14.###.184.53:23
  • 23#.##9.9.187:23
  • 26.##.205.84:23
  • 19#.##.156.117:23
  • 17.###.133.198:23
  • 13#.##.61.180:23
  • 23#.#4.104.4:23
  • 13#.##.243.249:23
  • 78.###.138.169:23
  • 13#.##.101.73:23
  • 10#.##5.192.214:23
  • 82.##6.19.69:23
  • 79.###.212.88:23
  • 54.###.79.104:23
  • 14#.##5.132.228:23
  • 71.###.86.194:23
  • 11#.##4.175.62:23
  • 13#.##7.15.33:23
  • 76.#.230.55:23
  • 34.###.159.93:23
  • 24#.##2.12.244:23
  • 23#.##3.150.229:23
  • 23#.##.189.127:23
  • 4.###.215.92:23
  • 22#.##1.61.156:23
  • 14#.##.233.15:23
  • 19.##.100.50:23
  • 12.##.72.185:23
  • 51.###.236.68:23
  • 11#.##.194.22:23
  • 15#.##0.179.161:23
  • 15#.##1.208.30:23
  • 73.###.102.206:23
  • 25#.##.157.231:23
  • 81.##.254.3:23
  • 15#.##5.59.28:23
  • 24#.##7.42.48:23
  • 13#.##.240.221:23
  • 11#.##5.157.119:23
  • 66.##3.1.177:23
  • 55.##4.72.79:23
  • 19#.##1.232.78:23
  • 84.###.106.44:23
  • 16#.##0.226.53:23
  • 25#.##.44.145:23
  • 23#.##9.165.241:23
  • 63.##.253.208:23
  • 11#.##.249.253:23
  • 23#.#9.44.73:23
  • 60.##.92.180:23
  • 44.##.192.57:23
  • 10#.##1.132.102:23
  • 21#.#3.98.14:23
  • 21#.##.181.15:23
  • 12#.##1.152.165:23
  • 89.##.144.154:23
  • 14#.##8.111.6:23
  • 39.##6.87.14:23
  • 12#.##0.152.67:23
  • 20#.##2.16.235:23
  • 24#.#79.5.61:23
  • 3.###.214.138:23
  • 84.##.148.170:23
  • 15.##1.95.11:23
  • 13#.##.100.78:23
  • 13#.##7.168.104:23
  • 50.###.62.147:23
  • 20#.##.132.225:23
  • 14#.##.62.111:23
  • 1.##.177.141:23
  • 47.###.37.179:23
  • 15#.##3.109.224:23
  • 17#.##9.4.215:23
  • 19#.##3.49.58:23
  • 22#.##6.109.178:23
  • 22#.##5.197.197:23
  • 26.###.130.248:23
  • 55.##4.55.4:23
  • 74.###.77.112:23
  • 73.##3.80.48:23
  • 12#.#.186.248:23
  • 21#.##7.29.170:23
  • 71.###.223.34:23
  • 82.##.112.97:23
  • 35.##.132.61:23
  • 12#.##.51.104:23
  • 24#.#1.51.38:23
  • 14#.##5.84.79:23
  • 19#.##.205.157:23
  • 17#.##2.213.124:23
  • 19#.##4.231.70:23
  • 19#.##.246.62:23
  • 11#.##9.96.161:23
  • 13#.##.233.104:23
  • 25#.##8.207.17:23
  • 10#.##3.185.63:23
  • 18#.##2.141.228:23
  • 16#.##0.250.111:23
  • 23#.##.65.191:23
  • 25#.##2.130.120:23
  • 9.###.171.227:23
  • 44.###.80.228:23
  • 37.###.56.157:23
  • 20#.##.218.51:23
  • 10#.##4.215.209:23
  • 99.###.215.253:23
  • 20#.##.228.107:23
  • 13#.##5.232.96:23
  • 10#.#8.6.214:23
  • 50.##9.32.96:23
  • 19#.##0.148.118:23
  • 11#.##.98.106:23
  • 32.##3.21.6:23
  • 18.###.135.21:23
  • 14#.##.70.208:23
  • 67.##3.15.96:23
  • 86.###.34.110:23
  • 23#.##8.60.44:23
  • 29.###.114.158:23
  • 83.###.84.240:23
  • 10#.##3.255.161:23
  • 7.##.184.116:23
  • 17#.##7.122.247:23
  • 37.##.99.255:23
  • 49.###.201.120:23
  • 17#.##.92.107:23
  • 14#.##.158.83:23
  • 92.##.3.22:23
  • 22#.##.68.138:23
  • 12#.##6.142.67:23
  • 12#.##9.96.236:23
  • 14.##3.93.94:23
  • 20#.#2.30.46:23
  • 20#.##0.8.253:23
  • 14#.##.176.19:23
  • 18#.##4.182.154:23
  • 14#.##.22.116:23
  • 23#.##.99.231:23
  • 11#.##.175.74:23
  • 30.###.123.149:23
  • 10#.##.72.239:23
  • 19#.##6.254.141:23
  • 18#.##4.205.189:23
  • 11#.##9.239.57:23
  • 10#.##.226.80:23
  • 24#.#2.78.62:23
  • 24#.##4.30.179:23
  • 93.##.56.230:23
  • 10#.##3.43.239:23
  • 15#.##.239.140:23
  • 10#.##3.61.166:23
  • 23#.##3.208.105:23
  • 18#.##3.160.80:23
  • 21#.##.226.200:23
  • 18#.##.87.230:23
  • 16#.##.21.129:23
  • 99.###.164.31:23
  • 80.###.30.227:23
  • 42.###.173.143:23
  • 14#.##.249.45:23
  • 3.##.205.201:23
  • 67.###.74.158:23
  • 60.###.105.184:23
  • 15#.##0.65.27:23
  • 14#.#4.85.19:23
  • 20#.#4.67.83:23
  • 23#.##.116.94:23
  • 12.##.17.67:23
  • 63.##.113.165:23
  • 21#.##.50.143:23
  • 54.##5.43.30:23
  • 23#.##4.44.77:23
  • 58.###.200.192:23
  • 17#.##7.151.134:23
  • 81.###.148.120:23
  • 13#.##.216.193:23
  • 22#.##2.79.108:23
  • 21.###.127.220:23
  • 16.###.247.93:23
  • 81.##.116.251:23
  • 21#.##4.61.170:23
  • 36.##.205.229:23
  • 93.###.124.241:23
  • 23#.##4.58.80:23
  • 15#.#.83.109:23
  • 17#.##0.40.170:23
  • 34.###.205.172:23
  • 3.###.69.221:23
  • 17#.##2.36.189:23
  • 21#.##.199.66:23
  • 99.###.245.164:23
  • 13#.##9.112.13:23
  • 13#.##7.106.94:23
  • 15#.##1.195.114:23
  • 25#.##9.227.77:23
  • 26.###.249.112:23
  • 25.###.148.13:23
  • 4.##.6.80:23
  • 10#.##5.229.124:23
  • 75.###.155.224:23
  • 17.##.78.107:23
  • 61.#.234.117:23
  • 17#.##7.12.236:23
  • 14#.##0.123.93:23
  • 94.###.74.120:23
  • 11#.##.181.111:23
  • 24#.##9.141.43:23
  • 93.###.201.192:23
Receives data from the following servers:
  • 45.###.232.208:33335

Curing recommendations


Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

One month (no registration) or three months (registration and renewal discount)

Download Dr.Web

Download by serial number