Linux.Siggen.7157

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

e28081

Kills system processes:

sshd

Kills the following processes:

systemd
kthreadd
ksoftirqd/0
kworker/0:0
kworker/0:0H
watchdog/0
khelper
kdevtmpfs
netns
khungtaskd
writeback
ksmd
crypto
kintegrityd
bioset
kblockd
kswapd0
fsnotify_mark
kthrotld
ipv6_addrconf
deferwq
kworker/u2:1
kpsmoused
scsi_eh_0
scsi_tmf_0
kworker/0:1H
kworker/u2:2
jbd2/sda1-8
ext4-rsv-conver
kauditd
kworker/0:3
systemd-journal
systemd-udevd
rpciod
nfsiod
systemd-logind
kworker/0:1
dhclient
lockfile-touch
kworker/0:2
9bc2fd2a

Network activity:

Awaits incoming connections on ports:

127.0.0.1:33337

Establishes connection:

8.#.8.8:53
45.###.232.208:33335

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

DNS ASK:

ro##me.xyz

Sends data to the following servers:

45.###.232.208:33335
19.###.94.138:23
15#.##3.129.134:23
86.##.228.59:23
24#.##2.81.139:23
15#.##8.225.232:23
11#.##.194.122:23
23#.##.142.51:23
18#.##3.117.213:23
18#.##4.94.55:23
22.###.90.159:23
27.###.172.150:23
25#.##.169.75:23
23#.##3.43.161:23
96.###.189.238:23
10#.##3.141.160:23
14#.##.94.217:23
22#.##.157.78:23
19#.##8.177.42:23
38.##6.65.69:23
18#.##2.186.216:23
35.###.195.173:23
49.##.27.235:23
78.###.208.82:23
11#.##.118.108:23
15#.##6.141.48:23
12.##.235.1:23
19.###.141.166:23
30.###.51.109:23
83.##.190.145:23
12#.##.197.90:23
39.##8.99.65:23
71.##.50.167:23
33.##.245.26:23
13#.#3.65.46:23
11#.##.245.207:23
20#.##.39.117:23
11#.##7.156.218:23
24#.#0.55.22:23
48.###.76.144:23
12#.##2.197.75:23
12#.##3.168.245:23
25#.##5.190.67:23
5.##.234.204:23
45.###.151.36:23
12#.##6.115.22:23
25#.#2.98.36:23
20#.##3.47.15:23
65.##3.85.68:23
77.##0.95.42:23
82.###.44.207:23
11#.##4.156.92:23
44.###.62.254:23
23#.##8.104.16:23
81.##.124.140:23
23#.##4.26.49:23
11#.##2.176.187:23
42.#.184.55:23
20#.#.248.26:23
65.##.226.81:23
16.##.141.58:23
21#.##.42.225:23
20#.##.108.66:23
23#.##.146.214:23
50.##5.69.71:23
19#.##5.81.108:23
15#.##.139.18:23
16#.##7.222.180:23
24#.#.49.143:23
14#.##4.4.201:23
18#.##7.220.169:23
98.#.159.18:23
20#.##5.175.128:23
49.##.216.37:23
13#.##7.193.65:23
46.###.174.119:23
95.###.229.176:23
18#.##.193.66:23
13#.##2.182.83:23
17#.##.162.27:23
30.###.125.214:23
21#.##.156.106:23
97.###.26.239:23
17#.##.133.199:23
10#.##.27.191:23
24#.##.156.191:23
59.###.151.12:23
1.#.#4.192:23
91.##.178.83:23
19#.##3.114.65:23
20#.#3.56.69:23
53.###.75.188:23
38.##0.31.42:23
12#.##8.135.191:23
14#.##.101.60:23
14#.##.131.14:23
62.##5.115.8:23
22#.##2.140.198:23
13#.##5.228.171:23
20#.##0.158.145:23
17#.#.114.218:23
17#.#8.47.49:23
14.##.49.46:23
10#.##.108.250:23
24#.##5.205.135:23
15#.##7.59.27:23
77.##.3.43:23
17#.##2.33.250:23
17#.##9.83.62:23
23#.##.231.215:23
58.###.65.108:23
60.##5.16.53:23
63.###.118.92:23
78.###.205.94:23
23#.##8.111.195:23
19#.##.67.234:23
20#.#.223.151:23
22#.##8.33.165:23
20#.##.179.14:23
22.##.117.118:23
9.###.196.2:23
22.###.103.245:23
11#.##9.170.109:23
13#.##.253.181:23
98.##.160.38:23
95.##.240.44:23
10#.##.224.17:23
36.###.193.38:23
23#.##9.62.108:23
74.###.202.137:23
22#.##6.237.44:23
16#.#05.6.42:23
13#.##.66.200:23
21#.##3.86.49:23
88.##.245.90:23
39.##1.68.69:23
16#.##6.42.83:23
54.###.240.169:23
12#.##.119.251:23
20#.##.111.65:23
11#.##.13.250:23
20#.##1.144.251:23
14#.##9.39.143:23
18#.##.212.191:23
39.##3.10.27:23
13#.##8.160.130:23
16#.##5.116.104:23
17#.##6.178.190:23
16#.##9.169.145:23
10#.##2.101.49:23
12#.##2.122.135:23
24#.##.158.244:23
83.###.232.141:23
20.##.151.96:23
65.##.170.51:23
82.##9.16.98:23
15#.##3.66.63:23
12#.#7.6.199:23
25#.#3.8.151:23
23#.##5.206.54:23
14#.##.161.188:23
33.##.74.141:23
25#.##.149.181:23
12#.##.171.10:23
22#.##6.76.239:23
18#.##.106.147:23
58.##.112.103:23
16#.##4.156.55:23
56.###.220.135:23
22#.##.40.215:23
25#.##.150.22:23
19#.##2.174.179:23
43.###.181.21:23
13#.##6.86.24:23
21#.##0.156.93:23
42.##.46.69:23
54.##.118.147:23
25#.##2.184.218:23
25#.##0.159.227:23
11#.##7.99.19:23
78.##.67.90:23
17.##5.81.90:23
20#.#.206.68:23
21#.##.216.232:23
20#.##7.12.176:23
11#.#1.138.4:23
24#.##6.102.18:23
57.#.193.94:23
31.##.164.180:23
90.###.142.70:23
23#.#.81.65:23
66.##.118.167:23
16#.##.119.102:23
46.###.111.55:23
21#.##.27.199:23
14#.##5.100.91:23
15#.##0.246.104:23
20#.##3.66.221:23
12#.##0.153.89:23
4.##.153.160:23
67.#.87.144:23
99.#.36.100:23
3.##.129.153:23
24#.##8.90.247:23
17#.#3.62.53:23
19#.##8.73.105:23
62.##.47.114:23
23#.#2.34.38:23
22#.##.210.68:23
98.###.114.40:23
86.###.217.220:23
85.##.33.115:23
86.###.128.31:23
24#.##.126.79:23
6.###.195.56:23
43.##4.73.1:23
23#.##6.164.7:23
40.###.155.10:23
17#.#.223.23:23
25#.##.115.127:23
9.##.111.204:23
20#.##2.237.124:23
19#.##5.175.126:23
10#.##7.173.150:23
22#.##2.224.177:23
24.###.64.244:23
20#.##.67.101:23
22#.##2.58.241:23
92.###.122.68:23
70.###.161.111:23
11.#.101.5:23
13#.##5.194.92:23
14#.##.189.157:23
21#.##3.135.192:23
16#.##3.251.174:23
59.##.174.76:23
12#.##1.116.204:23
47.###.107.19:23
68.###.243.72:23
23#.##9.91.162:23
25#.##3.217.100:23
11#.##2.230.69:23
23#.##9.22.173:23
12#.##.68.134:23
97.###.71.192:23
24#.##.70.141:23
24#.##5.155.139:23
10#.##0.213.113:23
12#.#5.66.78:23
79.##.97.23:23
16#.##6.94.223:23
11#.##3.227.84:23
19#.##9.81.53:23
45.###.79.132:23
6.###.47.21:23
25.###.142.211:23
19#.##.126.196:23
14#.##.128.146:23
23#.##2.213.210:23
19#.##7.12.166:23
22#.#.184.255:23
21#.##5.85.145:23
25.#.43.145:23
20.###.25.236:23
17#.##4.51.88:23
12.###.166.233:23
78.##.20.54:23
13#.##.207.213:23
15#.##8.190.148:23
14#.##0.228.137:23
22#.##6.192.222:23
12#.##2.22.85:23
24#.##7.145.99:23
13#.##3.220.152:23
19#.##5.43.179:23
10#.#0.89.89:23
15#.##2.175.60:23
39.##.160.177:23
11#.##9.39.140:23
25#.##.22.199:23
99.###.11.228:23
25#.##9.131.64:23
23#.##1.169.141:23
23#.##.248.68:23
10#.##.212.104:23
13#.#2.51.40:23
10#.##5.36.75:23
21#.#7.70.0:23
10#.#8.4.228:23
60.##.22.125:23
12#.##6.158.9:23
18#.##6.134.236:23
96.###.96.191:23
23#.##9.46.246:23
30.##.13.34:23
13#.##8.157.16:23
76.##.134.24:23
20#.##9.65.169:23
40.##.38.219:23
23#.#4.68.2:23
10#.##.113.201:23
75.##1.56.61:23
18#.##.115.225:23
77.###.234.90:23
83.###.57.137:23
20#.##6.187.61:23
23#.##.176.250:23
20#.#7.68.29:23
95.###.53.180:23
80.##6.59.50:23
3.##.89.111:23
12#.##.62.108:23
14#.##.118.68:23
21#.##.175.128:23
25#.##5.252.68:23
21.##9.49.38:23
34.###.28.108:23
24#.##.121.206:23
16#.##.198.251:23
20#.##8.154.82:23
24#.##.32.161:23
53.###.48.111:23
43.##3.1.97:23
24#.##4.92.42:23
10#.##0.164.44:23
15#.##9.90.67:23
18#.#.187.136:23
93.###.137.255:23
2.###.102.0:23
51.###.108.29:23
14#.#3.2.191:23
23#.##.231.150:23
14#.##6.47.115:23
12#.##.179.127:23
49.##.158.81:23
23#.#28.17.6:23
23#.##4.129.52:23
11#.##3.229.163:23
67.###.176.98:23
19#.##9.152.15:23
41.##.79.207:23
47.###.133.221:23
14#.##.215.99:23
15#.##0.64.69:23
15#.#.50.235:23
15.##.89.229:23
24#.##8.35.126:23
10#.##.72.146:23
98.##.39.70:23
14#.##8.125.222:23
59.###.23.183:23
28.##.148.250:23
22#.##4.208.44:23
21#.##.224.178:23
47.###.160.115:23
22#.##1.166.136:23
47.###.99.220:23
11#.##.255.158:23
18#.##.144.193:23
19#.##.46.200:23
10#.##.181.97:23
11#.##7.1.195:23
15#.##4.186.102:23
16#.##1.250.137:23
15#.##0.226.113:23
11.##7.67.12:23
89.##.244.193:23
14#.##7.62.64:23
15#.##1.18.189:23
44.##.76.255:23
23.###.36.169:23
19#.##6.189.39:23
15#.##9.162.49:23
18#.##0.169.250:23
9.###.131.103:23
82.###.234.141:23
37.###.34.242:23
10#.##.85.130:23
46.##.250.133:23
38.##.2.85:23
23#.#3.60.16:23
81.###.138.22:23
11#.##.17.253:23
23#.##.255.220:23
18#.#.67.59:23
23.##5.8.231:23
13#.##.111.188:23
14#.##1.248.177:23
11#.##0.126.253:23
22#.##0.184.67:23
46.##.9.184:23
35.##.225.205:23
23#.##9.217.220:23
34.###.21.150:23
12#.##1.62.234:23
22.###.118.87:23
17#.##8.73.109:23
62.###.126.127:23
70.##.148.174:23
21#.##.227.161:23
22#.##0.181.243:23
3.##.4.33:23
53.###.157.110:23
20.###.161.188:23
12#.##9.136.152:23
17#.##4.253.117:23
12#.##8.16.59:23
23.##.250.13:23
16#.#7.63.33:23
20#.##9.14.37:23
15#.##0.68.253:23
25#.##7.110.29:23
13.###.244.150:23
81.###.185.207:23
15#.##7.189.88:23
13#.##0.113.255:23
58.##3.3.1:23
50.###.113.18:23
80.##.120.71:23
14#.##6.4.109:23
77.###.125.192:23
22#.##.128.32:23
40.#.147.93:23
18#.##.75.225:23
26.##.93.239:23
18.##.3.228:23
63.###.150.31:23
25#.##.218.139:23
15.##0.33.92:23
18#.##3.38.13:23
24#.##9.193.138:23
71.##7.87.89:23
24#.#.142.114:23
21#.#3.3.131:23
18.###.186.254:23
13#.##3.122.68:23
21#.##2.94.29:23
19#.##9.74.34:23
23#.#7.7.218:23
3.###.183.67:23
12#.##9.218.42:23
11#.##8.219.56:23
27.##.160.69:23
15.###.120.13:23
1.##.58.31:23
49.###.210.39:23
11#.##2.208.94:23
24#.##.193.86:23
12#.##8.86.245:23
1.###.187.68:23
24#.#0.77.75:23
4.##.232.222:23
22#.##5.227.33:23
20#.##8.154.33:23
36.###.155.219:23
19#.##1.57.113:23
56.##.215.204:23
14#.##6.223.206:23
77.###.180.103:23
3.##.193.4:23
19#.##1.175.173:23
23#.##.221.221:23
79.##.77.97:23
20#.##.240.137:23
7.##.233.82:23
11#.##7.253.195:23
93.###.98.120:23
22#.##.154.193:23
5.##.3.0:23
13#.##2.55.250:23
77.##9.25.53:23
13#.##8.166.205:23
75.###.25.223:23
21#.##.11.168:23
14#.##.168.144:23
57.##.89.187:23
83.###.166.148:23
14#.##1.229.203:23
88.###.128.55:23
60.###.179.145:23
25.##.78.220:23
20#.##4.63.213:23
19#.##.202.238:23
68.##.219.136:23
1.###.253.57:23
30.###.241.143:23
11.###.142.226:23
23#.##3.5.245:23
96.##.39.100:23
16.##.163.44:23
41.###.181.165:23
18#.##.18.126:23
24#.##9.37.42:23
40.###.114.255:23
18#.##.251.205:23
20#.##8.130.165:23
23#.##.150.200:23
14#.##7.77.157:23
11#.##.159.138:23
22#.##.118.155:23
13#.##8.17.169:23
15#.##.129.103:23
23#.##9.20.160:23
19#.##.60.223:23
29.###.206.115:23
7.##.145.30:23
66.##6.85.96:23
20#.#7.55.48:23
16#.##3.221.128:23
28.##.138.125:23
42.###.96.252:23
25#.##4.229.121:23
67.##9.48.79:23
14#.##8.138.144:23
53.##.37.217:23
23#.##8.101.63:23
66.##.205.232:23
36.##.228.67:23
39.##.31.17:23
1.##.43.149:23
22#.##.225.121:23
12#.##3.231.38:23
18#.##.239.120:23
17#.##.13.142:23
23#.##1.168.130:23
93.###.117.146:23
58.###.146.171:23
89.##8.1.244:23
22#.##3.148.238:23
16#.##7.130.27:23
16#.##5.135.191:23
14#.##7.232.17:23
18#.##4.4.201:23
39.###.60.220:23
79.###.103.157:23
71.###.145.255:23
16#.##1.19.109:23
11#.##8.210.69:23
6.#.#87.8:23
14#.##8.83.235:23
24#.##.49.231:23
34.###.205.46:23
19#.##9.68.162:23
18#.##.179.81:23
14#.##.127.187:23
33.###.26.117:23
82.###.215.189:23
22#.##7.234.233:23
10#.##.102.217:23
16#.##4.122.42:23
99.##.227.22:23
69.###.12.221:23
34.##.200.64:23
13.##.62.47:23
13#.#1.45.30:23
18#.##2.55.147:23
20#.##6.109.22:23
12#.##9.162.135:23
66.##.219.76:23
15#.##9.173.25:23
99.###.59.117:23
9.###.206.15:23
1.##.209.182:23
36.###.102.233:23
81.###.199.128:23
13#.#21.16.4:23
44.###.194.14:23
24#.#0.144.3:23
11#.##3.95.110:23
16#.#4.89.28:23
87.###.44.216:23
16#.#.56.125:23
22#.##.126.220:23
18#.##.57.223:23
98.##.81.246:23
26.##3.160.9:23
14#.##.107.194:23
66.###.248.199:23
14#.##.118.72:23
44.###.230.127:23
19#.##9.66.69:23
66.###.113.127:23
39.##.27.68:23
62.##.227.254:23
22#.##8.242.191:23
21#.##.149.75:23
20#.##6.133.111:23
21#.##1.120.237:23
24#.##6.26.63:23
12#.##.86.150:23
20#.##1.123.94:23
10#.#77.60.6:23
25#.##3.14.19:23
15#.##6.53.223:23
20#.##0.193.49:23
22#.##9.247.103:23
97.###.108.15:23
97.##1.46.83:23
18#.#1.15.4:23
10#.##3.109.70:23
22#.#.110.18:23
71.##2.97.30:23
16#.#3.243.6:23
14#.#.191.79:23
91.##6.38.54:23
17#.##6.69.39:23
10#.##.127.42:23
14#.##7.44.250:23
15#.##.235.208:23
15#.##6.157.154:23
11#.##1.252.180:23
13#.##5.173.82:23
14#.##8.38.251:23
35.###.209.206:23
15#.##6.248.159:23
11#.##.66.202:23
17.###.213.240:23
15#.##5.64.57:23
52.###.203.89:23
28.###.237.10:23
95.###.143.142:23
13.##.86.63:23
73.##4.62.67:23
75.#.185.125:23
18#.##.220.62:23
19#.##7.80.104:23
95.#.31.1:23
45.##.23.2:23
15#.##9.181.178:23
14#.##5.166.70:23
46.###.250.152:23
13#.##0.133.5:23
24#.##9.127.30:23
14.##9.41.56:23
88.###.115.155:23
5.###.182.109:23
18#.#52.57.5:23
18#.##6.37.83:23
13#.##.126.118:23
15#.##6.220.198:23
32.###.79.187:23
25#.#.123.172:23
6.##.128.66:23
12#.##0.249.14:23
6.##.55.190:23
18#.##.87.141:23
22#.##3.181.17:23
21.##.232.173:23
13#.##4.126.36:23
14#.##.79.184:23
18#.##9.77.191:23
19#.##8.208.246:23
99.###.219.234:23
22#.##9.240.231:23
28.##3.83.32:23
29.###.250.204:23
10#.##6.86.221:23
19#.##3.91.222:23
76.##.129.80:23
41.###.35.134:23
16#.##8.193.12:23
24#.##.119.141:23
75.##.96.204:23
12#.##.208.134:23
20.##.6.187:23
28.###.123.176:23
42.###.222.30:23
27.##.196.251:23
17#.##8.26.74:23
22#.##.146.153:23
77.##.53.21:23
24.###.163.121:23
40.##.73.229:23

Receives data from the following servers:

45.###.232.208:33335

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations