Linux.Siggen.7473

Technical Information

Malicious functions:

Removes itself

Launches itself as a daemon

Substitutes application name for:

(null)

Kills system processes:

sshd

Network activity:

Awaits incoming connections on ports:

127.0.0.1:2174

Establishes connection:

8.#.8.8:53
19#.##.195.195:53
94.###.84.230:7122

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

DNS ASK:

ob####over.pirate

Sends data to the following servers:

94.###.84.230:7122
42.##5.51.69:23
21#.#92.6.19:23
71.###.117.127:23
48.##1.36.7:23
65.###.129.206:23
25.##.136.68:23
20#.##5.7.111:23
15#.##.144.99:23
13#.#.90.113:23
11#.##7.242.49:23
20#.##.116.14:23
13#.##9.39.91:23
47.##3.46.90:23
16#.##1.224.183:23
15#.##7.73.10:23
13#.##.123.248:23
20#.##6.61.197:23
16#.##.187.208:23
17#.#00.24.3:23
93.##4.5.90:23
48.###.243.106:23
20#.#1.78.89:23
63.###.99.237:23
20#.##.195.175:23
12#.##5.121.217:23
62.###.130.122:23
74.##.252.9:23
19#.##.35.243:23
34.###.142.87:23
12#.##4.94.42:23
11#.##1.221.177:23
37.###.182.166:23
84.###.12.216:23
12#.##0.129.133:23
46.###.225.18:23
87.##4.7.184:23
50.#.74.91:23
59.##.171.18:23
17#.##.92.236:23
14#.##.241.156:23
13#.##.253.39:23
83.###.243.14:23
14#.##.152.201:23
16#.##.160.103:23
5.###.3.155:23
14#.##.127.209:23
11#.##2.127.210:23
18#.##5.199.72:23
37.#.168.104:23
20#.##5.122.209:23
95.##.177.109:23
14#.##.213.20:23
21#.##.16.244:23
18#.##.166.220:23
20#.##5.27.27:23
14#.##.214.46:23
11#.#.12.252:23
21#.#42.2.75:23
53.###.202.210:23
89.###.116.128:23
15#.##.107.14:23
92.##.177.90:23
12#.##1.71.167:23
13#.##9.58.230:23
4.##.227.29:23
34.###.229.209:23
87.###.254.76:23
62.##.74.96:23
18#.##5.218.4:23
16#.##6.193.127:23
13#.##1.146.245:23
98.###.128.79:23
62.###.231.189:23
39.##.76.252:23
19#.##7.139.225:23
10#.##.121.176:23
14#.##0.74.49:23
17#.##0.6.169:23
21#.##8.133.127:23
53.##.7.68:23
12#.##.192.165:23
31.##.39.14:23
12#.#.72.217:23
19#.##.136.231:23
83.###.140.166:23
12#.##0.6.146:23
2.##.185.227:23
12#.##7.40.26:23
20#.##.47.133:23
76.###.198.119:23
12.###.21.140:23
97.##3.37.0:23
13#.##6.69.10:23
16#.##.213.250:23
11#.##.211.11:23
20#.##0.56.140:23
17#.##6.102.197:23
77.###.165.93:23
68.#.255.128:23
16#.##1.93.241:23
93.##.53.123:23
49.###.38.134:23
14#.##2.28.145:23
16#.##.185.234:23
13#.#52.6.76:23
76.##0.184.4:23
15#.##.115.30:23
40.###.108.158:23
22#.##6.41.164:23
24.##.151.186:23
14#.##5.74.70:23
16#.##.109.201:23
76.##.145.38:23
20#.##.213.131:23
10#.##.46.166:23
18#.##2.124.153:23
22#.##.158.150:23
16#.##0.104.247:23
13#.#8.3.1:23
16#.##.35.189:23
13#.##2.225.8:23
42.##.55.96:23
19#.##.85.140:23
82.###.74.149:23
19#.##1.205.244:23
92.###.237.199:23
23.#.221.147:23
17#.##7.2.194:23
44.##3.66.0:23
74.##.130.87:23
19#.##4.150.134:23
37.##.31.32:23
21#.#.148.30:23
10#.#6.73.92:23
11#.##4.205.59:23
17#.##9.241.22:23
8.##.183.101:23
66.###.220.201:23
84.###.28.209:23
17#.##.186.234:23
11#.##.250.244:23
31.##4.21.26:23
88.##.247.248:23
20#.##4.91.141:23
10#.##2.127.65:23
52.##.193.56:23
64.##2.34.59:23
15#.##.232.31:23
22#.#0.33.58:23
18#.##1.78.14:23
12.#.23.73:23
14.###.15.133:23
14#.##4.78.143:23
16#.##6.165.13:23
31.##4.3.144:23
11#.##.163.143:23
89.##.69.99:23
17#.##.190.214:23
13#.##1.82.23:23
42.###.136.143:23
13#.##2.131.30:23
20#.##.111.250:23
14.##.56.50:23
81.###.229.210:23
21#.##7.249.198:23
52.##9.30.23:23
93.###.20.226:23
16#.##.223.102:23
60.##.87.113:23
20#.##6.115.197:23
19#.##.173.200:23
12#.##6.56.37:23
20#.#5.61.88:23
38.###.12.230:23
16#.##5.207.204:23
46.###.232.109:23
72.##.255.210:23
21#.##5.148.118:23
13#.##.199.107:23
51.##.180.200:23
17.##.77.205:23
14#.##3.69.188:23
9.###.29.178:23
12#.#6.4.56:23
43.###.144.185:23
23.##6.9.245:23
76.###.76.112:23
4.###.197.36:23
64.##.53.250:23
37.###.166.76:23
15#.##.176.153:23
44.##9.75.1:23
20#.#.252.57:23
16#.##1.100.101:23
18#.##0.78.201:23
10#.##7.78.226:23
17#.##3.111.34:23
17#.##0.218.27:23
10#.##9.152.41:23
20#.##7.114.187:23
18#.##.206.20:23
16#.##6.215.82:23
70.##.64.84:23
10#.##.57.234:23
4.###.181.35:23
20#.##8.132.56:23
19.###.157.210:23
17#.##1.119.99:23
12#.##.109.149:23
1.##.130.111:23
94.##.155.227:23
18#.##6.155.175:23
17.###.178.241:23
93.##.112.58:23
4.###.126.145:23
12#.##5.83.220:23
72.##6.4.41:23
10#.##.244.13:23
13#.##.241.85:23
11#.##.126.149:23
19#.##6.110.108:23
80.###.25.120:23
11#.##.224.52:23
12#.##.83.238:23
32.###.18.180:23
96.##0.27.63:23
89.#.23.58:23
14#.##2.236.104:23
76.##.85.93:23
71.###.66.211:23
71.###.169.26:23
75.##4.10.28:23
96.###.25.123:23
16#.##3.68.122:23
81.###.139.61:23
14#.##.59.122:23
14#.#36.9.59:23
17#.#.196.70:23
17.###.85.110:23
81.###.25.164:23
13#.##.169.25:23
58.##.192.109:23
12#.##.215.220:23
44.###.145.111:23
12#.##5.121.23:23
12#.#8.90.20:23
20#.#5.84.60:23
11#.#.38.77:23
11#.#.105.84:23
36.##.28.248:23
18#.##.144.127:23
12#.##7.154.162:23
92.##.177.245:23
18#.##.84.198:23
14#.##9.130.112:23
84.##.238.189:23
15#.##1.128.232:23
20#.##7.193.214:23
19#.##8.108.103:23
21#.#1.3.5:23
69.###.53.199:23
50.###.228.17:23
11#.##3.156.72:23
19.###.190.214:23
17#.##6.160.202:23
99.###.137.57:23
18#.##7.160.179:23
44.###.179.213:23
94.###.254.195:23
18#.##1.137.50:23
19#.##0.147.182:23
90.##4.30.44:23
60.###.145.215:23
12#.##3.81.202:23
16#.##9.223.16:23
11#.##.20.242:23
11#.##.10.237:23
19#.##0.136.221:23
4.##.228.85:23
35.###.202.192:23
20#.##.80.161:23
19#.##7.25.23:23
49.#.197.158:23
10#.##.234.112:23
14#.##.94.173:23
49.###.119.73:23
21#.##4.236.176:23
18.###.183.57:23
11#.##1.201.67:23
19#.##0.76.166:23
4.###.109.108:23
13#.#8.15.15:23
21#.##3.111.131:23
63.###.253.230:23
17#.##7.70.56:23
17#.##1.60.77:23
14#.##6.253.81:23
20#.#.199.122:23
45.###.208.84:23
1.#.7.77:23
11#.#1.67.89:23
19#.##.110.97:23
27.###.224.43:23
71.###.26.143:23
19#.##6.183.142:23
63.##.156.249:23
91.##9.45.80:23
63.###.167.209:23
70.##.192.205:23
16#.##.142.99:23
11#.##.118.129:23
10#.##.204.139:23
13#.##0.173.58:23
12#.##1.117.124:23
17#.##8.17.58:23
19#.##1.144.49:23
19#.##7.167.159:23
39.##6.78.35:23
16#.##8.27.225:23
17#.##7.97.182:23
42.##.132.56:23
18#.##3.89.33:23
23.##3.83.59:23
40.##.119.62:23
15#.##.151.75:23
17#.##6.145.66:23
24.###.204.108:23
62.###.126.179:23
86.###.245.65:23
10#.#.174.104:23
11#.##.33.229:23
41.##.25.188:23
19#.##.39.191:23
61.##.109.89:23
11#.#2.113.5:23
54.##.58.31:23
57.##.123.160:23
86.##0.86.61:23
20#.##5.63.42:23
10#.##1.22.78:23
9.##.219.12:23
18#.##4.156.67:23
97.##.189.89:23
24.#.251.7:23
54.##.75.92:23
19#.##3.24.206:23
59.###.143.11:23
17#.##9.152.247:23
25.##.113.74:23
75.#.250.143:23
20#.##6.5.203:23
20#.##.166.26:23
11#.##2.63.83:23
70.###.135.188:23
19#.##9.218.106:23
40.###.173.198:23
61.###.111.241:23
24.##9.91.28:23
16#.##7.94.68:23
21#.##.139.90:23
47.##.155.55:23
16#.##.76.249:23
15#.##8.80.82:23
27.###.240.99:23
17#.##9.193.160:23
14#.##.216.19:23
32.###.168.137:23
21#.#.67.193:23
18#.##1.131.238:23
19#.##.48.134:23
41.##.133.139:23
42.###.202.11:23
15#.##8.212.129:23
18#.#.21.75:23
15#.##7.237.149:23
93.##.83.247:23
18#.##.245.164:23
21#.##3.153.79:23
17#.##0.94.223:23
10#.##0.186.5:23
15#.##.30.142:23
18#.##3.66.52:23
16#.#.26.163:23
71.###.18.171:23
12.###.250.232:23
73.##.178.51:23
13#.##.171.161:23
43.###.138.228:23
15#.##8.19.242:23
80.##.183.67:23
16#.#4.5.236:23
12#.##0.255.178:23
18#.##.123.99:23
4.###.228.171:23
43.###.140.32:23
17#.##.67.158:23
15#.##.103.58:23
17#.##6.182.86:23
21#.##7.154.229:23
20#.##.181.42:23
16#.##4.204.97:23
64.###.234.211:23
57.###.183.180:23
18#.#7.36.72:23
11#.##7.182.226:23
93.###.33.231:23
20#.#.125.156:23
69.##.19.255:23
37.###.164.82:23
20.##.188.74:23
16#.##9.62.74:23
19#.##4.239.21:23
88.##.139.115:23
1.##.206.56:23
79.###.199.224:23
11#.##0.85.33:23
22#.##.110.220:23
39.###.151.176:23
17#.##9.71.144:23
18#.##8.248.100:23
37.##.221.186:23
20#.##.159.61:23
19.###.105.160:23
10#.##.203.237:23
73.##.48.10:23
16#.##0.125.60:23
10#.##0.91.48:23
74.##.178.199:23
14#.#.112.238:23
19#.##.100.211:23
98.##.182.162:23
16#.##8.103.244:23
5.##.13.251:23
90.##.89.92:23
17.##.20.116:23
16#.##.254.240:23
10#.##.122.106:23
14#.##3.166.200:23
16#.#0.35.19:23

Receives data from the following servers:

94.###.84.230:7122

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations