Linux.Siggen.995

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

YNWwJYlZGI4wsCs66IVumQZeQZpSSV77

Network activity:

Awaits incoming connections on ports:

0.0.0.0:23
0.0.0.0:22
0.0.0.0:443
0.0.0.0:81
0.0.0.0:8080

Establishes connection:

8.#.8.8:53
20#.##1.34.89:721

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

Sends data to the following servers:

85.###.168.198:23
16#.##.197.27:23
18#.##.244.51:23
17#.##9.244.124:23
20#.##.110.119:23
62.##.3.113:23
40.##5.37.27:23
19#.#8.46.23:23
89.##.224.239:23
20#.##7.88.149:23
16#.##.26.251:23
10#.##7.44.244:23
99.###.239.251:23
22#.##.220.20:23
10#.#0.71.86:23
59.###.170.253:23
12#.##5.119.126:23
10#.##.214.204:23
16#.##3.49.145:23
44.##.164.100:23
15#.##5.18.152:23
16#.##9.67.44:23
20#.##2.72.234:23
78.###.208.86:23
17.###.233.153:23
62.###.186.170:23
20#.##0.163.22:23
32.##6.96.43:23
77.###.110.61:23
14.###.40.195:23
13.##2.69.48:23
35.##0.236.5:23
61.###.153.103:23
19.###.180.154:23
20#.#.52.84:23
11#.##0.243.74:23
16#.##8.129.183:23
62.##.112.24:23
14#.##3.231.30:23
11#.##9.36.246:23
13#.##2.166.10:23
11#.##5.99.51:23
19#.##3.71.29:23
12#.##2.96.125:23
20#.##6.252.130:23
2.###.168.139:23
20#.##1.197.111:23
12.###.220.56:23
16#.##4.21.159:23
16#.#7.47.4:23
19#.##.195.23:23
53.###.30.132:23
68.##.133.27:23
19#.##.190.206:23
10#.##0.0.149:23
19#.##2.168.94:23
21#.##4.223.121:23
14#.##8.228.58:23
16#.##.193.157:23
83.##.74.42:23
65.###.232.176:23
47.###.116.32:23
43.##0.9.4:23
19#.#2.79.17:23
34.###.164.151:23
81.###.243.13:23
13#.##6.48.12:23
24.###.90.237:23
15#.##.93.174:23
11#.##1.58.223:23
83.###.56.124:23
18#.#.248.47:23
19#.##8.210.29:23
92.##.213.219:23
76.###.196.173:23
67.###.154.215:23
10#.##.133.77:23
17#.##8.91.247:23
41.###.161.52:23
20#.##7.167.135:23
15#.##0.161.16:23
18#.##0.101.143:23
10#.##6.118.104:23
35.###.160.90:23
77.##1.44.50:23
80.###.128.221:23
10#.##7.59.99:23
10#.##.123.237:23
19.##.76.12:23
15#.#.239.81:23
67.###.209.216:23
13#.#.179.81:23
10#.##9.229.118:23
17#.##4.209.167:23
15#.#8.206.1:23
45.##.25.123:23
14#.##4.250.195:23
21#.##.13.119:23
11#.##2.185.81:23
17#.#03.87.6:23
15#.##1.76.151:23
11#.##8.127.17:23
66.###.78.248:23
15#.##.30.249:23
12#.#.32.103:23
22#.##3.52.178:23
71.###.208.113:23
11#.##9.133.12:23
12.##.40.43:23
17#.##5.142.225:23
12#.##9.142.58:23
67.###.152.86:23
16#.##3.127.78:23
10#.##3.226.6:23
15#.##6.34.162:23
19#.##.109.229:23
12#.##1.23.87:23
66.##.140.134:23
74.##.166.169:23
37.##9.96.29:23
21#.##4.47.118:23
20#.##7.54.47:23
14#.##1.18.82:23
60.###.233.70:23
47.##.73.94:23
21#.##7.199.47:23
76.#.179.49:23
11#.##1.52.30:23
14#.##7.209.194:23
19.###.191.18:23
10#.##7.89.213:23
32.##.41.61:23
69.##.118.241:23
24.##.184.44:23
97.##.176.189:23
87.###.13.152:23
19#.##.142.13:23
11#.##.116.138:23
11#.##3.185.29:23
20#.##4.176.233:23
91.##.226.12:23
18#.##1.162.140:23
15#.##9.180.156:23
17#.##1.90.48:23
10#.##.175.131:23
12#.##6.216.55:23
20#.##5.153.2:23
59.###.241.127:23
21#.##.244.180:23
63.###.57.176:23
16#.##.235.152:23
38.###.53.107:23
13#.##5.189.113:23
21#.##9.187.39:23
4.###.47.159:23
42.###.238.157:23
15#.##0.201.13:23
36.###.224.68:23
10#.##.106.32:23
54.##.221.196:23
17#.##6.197.219:23
16#.##9.158.238:23
20#.##7.111.176:23
97.###.229.239:23
14#.##4.186.158:23
21#.##0.238.107:23
17#.##0.190.255:23
76.##3.5.175:23
10#.##8.136.249:23
11#.##.39.116:23
65.##.89.138:23
18#.##0.176.211:23
18#.##.178.72:23
15#.##.167.252:23
15#.##.153.107:23
12#.##.62.148:23
94.##2.69.47:23
11#.#.132.131:23
17.###.135.89:23
42.##.250.183:23
69.###.212.208:23
22#.##5.40.79:23
88.###.174.80:23
19#.##.110.207:23
20#.##7.70.215:23
72.##5.64.54:23
14.###.135.11:23
10#.##.58.161:23
18#.#0.10.33:23
11#.#2.77.81:23
10#.##.220.30:23
18#.##8.102.237:23
45.##.60.159:23
10#.##.237.198:23
87.###.185.17:23
43.##.37.234:23
11#.##6.171.27:23
19#.##5.233.212:23
97.###.112.19:23
38.##.138.12:23
20.##.235.140:23
53.###.109.136:23
45.##0.96.47:23
88.##.251.159:23
8.###.83.185:23
11#.##.129.88:23
10#.##3.144.228:23
83.##8.92.71:23
1.###.234.51:23
14.##.218.162:23
94.###.118.242:23
71.##2.5.25:23
5.##.71.237:23
10#.##.224.193:23
10#.##.148.119:23
32.##.73.12:23
17#.##0.255.40:23
16#.##7.146.6:23
19#.#6.51.43:23
15#.##4.139.224:23
12#.##9.135.160:23
22#.##2.81.106:23
16#.##.44.236:23
95.###.201.80:23
19#.##1.102.112:23
13.###.191.146:23
11#.##9.69.125:23
39.###.54.204:23
66.###.116.214:23
87.##.100.141:23
10#.##.103.45:23
11#.##9.183.185:23
53.###.155.186:23
16#.##7.68.141:23
19#.##5.41.94:23
23.##.71.173:23
87.###.214.39:23
19.##.213.246:23
11#.##0.77.67:23
19#.#.29.30:23
9.##.80.101:23
86.##.247.229:23
31.#.10.71:23
16#.##.244.217:23
67.###.107.211:23
21#.##0.120.2:23
15#.##.204.184:23
65.###.193.139:23
31.##.62.232:23
66.##.226.116:23
17#.##8.219.110:23
20#.##7.129.31:23
13.#.29.244:23
20#.#7.4.91:23
57.##.202.160:23
9.###.186.12:23
76.##.251.165:23
10#.##7.81.219:23
13#.##0.90.28:23
10#.##0.228.163:23
13#.#03.24.8:23
18#.##.41.143:23
22#.#7.113.5:23
16#.##9.207.91:23
15#.##4.174.195:23
17#.##.116.14:23
74.###.169.186:23
18#.##5.161.114:23
10#.##3.63.27:23
9.###.21.171:23
46.###.165.143:23
14#.##6.88.231:23
83.###.43.179:23
18#.##8.73.86:23
20#.##.238.152:23
15#.#9.217.1:23
9.###.229.71:23
21#.##0.28.139:23
85.##.227.65:23
1.###.185.230:23
10#.#.82.64:23
22#.##1.190.125:23
21#.##.25.147:23
15#.##8.17.251:23
38.##.205.119:23
16#.#1.143.1:23
70.##.255.71:23
19#.#.218.159:23
11#.##.37.201:23
15#.##6.203.100:23
11#.#.59.203:23
14#.#48.53.4:23
19#.##.166.200:23
12#.##8.16.74:23
35.###.207.245:23
90.###.234.222:23
47.##.122.114:23
10#.##.206.13:23
20#.##.131.144:23
19.##.251.13:23
22#.##.122.218:23
70.##.166.88:23
12#.##4.87.59:23
21#.#8.47.76:23
15#.##.123.42:23
14#.##3.252.44:23
15#.#9.9.56:23
11#.##2.3.201:23
16#.#2.29.41:23
46.##.197.110:23
20#.##.216.182:23
62.###.28.237:23
12#.##.210.53:23
20#.##.45.141:23
68.###.216.197:23
94.###.144.180:23
14#.##.200.117:23
18#.##4.134.189:23
76.##6.51.50:23
14#.#4.63.2:23
4.###.133.37:23
12#.##7.157.96:23
53.###.108.143:23
2.###.200.234:23
95.##.190.252:23
18#.##.156.28:23
54.###.233.18:23
19#.##0.110.196:23
11#.##0.111.206:23
31.###.166.19:23
21#.#7.149.1:23
68.###.184.31:23
19#.##1.147.234:23
20#.##.80.181:23
43.##8.39.6:23
72.##.206.146:23
14#.##.219.210:23
11#.##3.70.35:23
16#.##8.91.211:23
20#.##7.165.124:23
20#.##6.231.67:23
23.##.249.15:23
16#.#3.12.20:23
15#.##.203.33:23
15#.##.43.191:23
90.##4.75.55:23
22#.##6.138.138:23
74.###.160.100:23
12#.##2.229.41:23
12#.##.84.159:23
81.###.188.71:23
20#.##9.134.8:23
15#.##5.206.140:23
14#.#.27.186:23
17#.##8.232.206:23
16#.##8.148.203:23
21#.##4.137.168:23
18#.##2.207.243:23
16#.#5.37.65:23
21#.##1.85.143:23
20.###.176.58:23
13#.##0.120.215:23
21#.##1.133.87:23
10#.##2.140.41:23
36.##.29.111:23
20#.##2.115.61:23
13#.##8.52.22:23
65.###.124.105:23
17.##5.8.86:23
97.###.221.110:23
18#.##1.79.89:23
19#.##0.247.134:23
67.###.142.81:23
11#.##9.102.107:23
20#.##8.46.66:23
22#.##8.254.83:23
15#.##9.201.238:23
83.##.178.191:23
17#.##3.116.35:23
16#.##4.193.255:23
14#.##5.220.246:23
16#.##3.104.204:23
67.##.135.157:23
15#.##1.247.36:23
14.###.192.238:23
42.#.165.76:23
16#.##2.203.146:23
21#.##.229.186:23
16#.##1.198.192:23
19#.##.15.125:23
18#.##8.118.255:23
16#.##4.8.189:23
27.##.194.176:23
11#.##0.23.39:23
18#.#5.59.16:23
12#.##6.243.43:23
4.###.64.128:23
32.###.87.184:23
17.##.53.195:23
12#.##0.169.215:23
19#.##.214.149:23
79.##.206.214:23
20#.#.120.212:23
18#.##7.216.208:23
1.###.155.164:23
18#.##3.109.3:23
21#.##1.198.31:23
21#.##9.172.48:23
59.###.211.94:23
16#.##6.163.246:23
57.##.69.72:23
73.###.234.65:23
39.###.62.146:23
20#.#9.78.3:23
67.###.242.58:23
61.###.243.150:23

Receives data from the following servers:

20#.##1.34.89:721

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement