Technical Information
Malicious functions:
Removes itself
Launches itself as a daemon
Network activity:
Awaits incoming connections on ports:
- 127.0.0.1:3902
Establishes connection:
- <LOCAL_DNS_SERVER>
- 95.###.62.169:5600
- 21#.##7.153.166:80
Other HTTP requests:
- 127.0.0.1:80/
Sends data to the following servers:
- 21#.#8.72.53:80
- 19#.##7.193.215:80
- 82.##.98.57:80
- 80.##.73.249:80
- 22#.##6.80.181:80
- 23#.##6.204.98:80
- 66.###.62.122:80
- 59.###.132.145:80
- 35.###.251.78:80
- 56.###.222.190:80
- 32.##9.53.29:80
- 17#.##6.75.110:80
- 17#.##3.205.38:80
- 31.##.9.118:80
- 16#.##1.216.233:80
- 13.###.102.47:80
- 18#.##3.142.0:80
- 60.###.170.102:80
- 13.###.49.138:80
- 67.###.13.238:80
- 11#.#.251.229:80
- 10#.##.187.91:80
- 16#.##2.114.27:80
- 15#.##7.242.139:80
- 21#.#.11.170:80
- 22#.##0.9.184:80
- 40.###.134.80:80
- 21#.##.130.128:80
- 11#.##2.29.126:80
- 97.###.202.117:80
- 44.##.217.3:80
- 16#.##1.172.208:80
- 17.##1.8.12:80
- 52.##9.37.23:80
- 18#.##3.172.199:80
- 21#.##4.89.156:80
- 13#.##1.105.115:80
- 36.###.24.148:80
- 18#.##3.78.187:80
- 24#.##7.124.118:80
- 16#.##7.187.33:80
- 96.##.99.136:80
- 13#.##5.182.175:80
- 24#.#1.4.36:80
- 1.##.56.105:80
- 22#.#8.20.87:80
- 19.##.252.71:80
- 58.##.21.136:80
- 11#.##7.163.142:80
- 18#.##3.214.118:80
- 12#.##7.10.38:80
- 22#.##.146.73:80
- 20#.##8.148.13:80
- 25#.##0.241.212:80
- 18#.##1.211.22:80
- 68.##4.188.5:80
- 12#.##3.37.42:80
- 72.##.73.200:80
- 61.##4.59.85:80
- 74.###.206.120:80
- 25#.#.103.241:80
- 14#.##6.26.249:80
- 11.##.50.158:80
- 22#.##.216.112:80
- 20#.##8.47.143:80
- 18#.##.166.214:80
- 14#.##4.196.57:80
- 22#.##6.45.67:80
- 16#.##.139.251:80
- 16#.##1.32.20:80
- 15.##.94.6:80
- 23#.##.86.158:80
- 62.###.102.68:80
- 49.###.36.111:80
- 15#.##.127.103:80
- 15#.##9.10.45:80
- 21#.##8.120.155:80
- 47.###.32.139:80
- 93.##9.143.9:80
- 13#.##7.61.45:80
- 12.###.12.110:80
- 83.##.2.31:80
- 16#.##1.202.28:80
- 12#.##4.187.130:80
- 55.###.216.248:80
- 23#.##7.65.217:80
- 96.##.245.173:80
- 83.###.201.48:80
- 23#.##0.44.34:80
- 46.##.27.113:80
- 61.##.60.56:80
- 60.###.95.163:80
- 10#.##0.189.191:80
- 57.###.166.172:80
- 23#.##3.152.72:80
- 11#.##.155.238:80
- 58.###.111.201:80
- 20#.##.197.19:80
- 12#.#9.86.73:80
- 82.##.231.235:80
- 45.###.32.222:80
- 32.##.144.133:80
- 21#.##7.153.166:80
- 72.###.198.222:80
- 19#.##.213.29:80
- 54.##.175.68:80
- 15#.#1.19.41:80
- 19#.##6.55.143:80
- 23#.##2.173.161:80
- 18.###.203.57:80
- 12#.##6.201.142:80
- 22.##6.36.60:80
- 21#.##.73.178:80
- 23#.#8.39.38:80
- 20#.##4.36.212:80
- 83.###.139.203:80
- 14.##.135.29:80
- 48.###.212.96:80
- 13.###.159.245:80
- 20#.##1.142.252:80
- 19#.##7.108.41:80
- 39.##.18.131:80
- 32.##.163.178:80
- 14#.##5.49.84:80
- 20#.#13.13.0:80
- 35.##.53.154:80
- 16#.##1.223.171:80
- 15#.##6.164.14:80
- 62.###.184.15:80
- 16#.##4.201.36:80
- 21#.##7.155.166:80
- 23#.#.64.53:80
- 10#.##8.225.32:80
- 77.##1.29.58:80
- 21#.##1.187.53:80
- 20#.##.180.75:80
- 73.##.106.244:80
- 11#.##.15.164:80
- 21#.##.176.128:80
- 14#.##9.242.115:80
- 30.###.233.161:80
- 15#.##3.168.190:80
- 11#.##.134.57:80
- 67.##7.5.115:80
- 23#.##4.80.118:80
- 82.##.236.181:80
- 12#.##6.1.189:80
- 57.###.28.178:80
- 39.###.217.165:80
- 22#.##7.161.154:80
- 15.##.167.138:80
- 13#.##2.23.70:80
- 66.##.237.138:80
- 15#.##.24.233:80
- 82.##1.0.93:80
- 13#.#.110.118:80
- 62.###.39.137:80
- 23#.##0.234.119:80
- 24#.##9.204.152:80
