Linux.Packed.693

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

Network activity:

Awaits incoming connections on ports:

127.0.0.1:31862

Establishes connection:

8.#.8.8:53
10#.##.166.210:47001
20#.###.160.191:8080
20#.##.170.13:8080
20#.##4.117.39:8080
18#.##.142.217:8080
18#.##4.203.98:8080
20#.##2.110.71:8080
2.###.160.191:80
92.##.170.13:80
95.###.203.98:80
21#.##.142.217:80
2.###.110.71:80
18#.##4.117.39:80
32.##.211.35:52869
14#.#.168.204:52869
18#.##.176.90:52869
20#.###.105.93:52869
12#.###.189.179:52869
4.###.152.51:52869
14#.###.172.206:52869
15#.##1.41.69:52869
18#.###.97.210:52869
7.##.#03.91:52869
14#.#.168.204:8080
32.##.211.35:8080
12#.###.189.179:8080
18#.##.176.90:8080
14#.###.172.206:8080
20#.##1.105.93:8080
4.###.152.51:8080
18#.##4.97.210:8080
15#.##1.41.69:8080
7.##.#03.91:8080
18#.###.97.210:37215
14#.#.168.204:37215
32.##.211.35:37215
12#.###.189.179:37215
14#.###.172.206:37215
12#.##1.189.179:80
18#.##4.97.210:7574
45.###.157.165:80
45.###.157.165:81
10#.##.175.59:49152
10#.##.175.59:8443
10#.##.175.59:8080
98.##.45.28:8080
32.##.211.35:80
18#.##.176.90:80
14#.##2.172.206:80
20#.##1.105.93:80
4.###.152.51:80
14#.#.168.204:80
15#.##1.41.69:80
7.##.103.91:80
18#.##4.97.210:80
20#.##.156.230:8080
20#.##0.22.26:8080
18#.###.118.159:8080
18#.##.175.136:8080
20#.##5.93.49:8080
18#.##.190.230:8080
78.##.156.230:80
11#.##5.93.49:80
21#.##0.118.159:80
92.##.175.136:80
10#.##.190.230:80
18#.##0.22.26:80
18#.##4.97.210:5555
20#.##6.220.0:52869
45.###.127.170:52869
26.###.133.123:52869
12#.###.29.109:52869
15#.##2.30.76:52869
10#.##2.4.187:52869
17#.##.77.56:52869
11#.###.89.111:52869
23#.##.83.221:52869
22#.###.184.49:52869
11#.##7.89.111:8080
45.###.127.170:8080
15#.##2.30.76:8080
20#.##6.220.0:8080
10#.##2.4.187:8080
12#.##5.29.109:8080
17#.##.77.56:8080
26.###.133.123:8080
23#.##.83.221:8080
22#.##9.184.49:8080
23#.##.83.221:80
10#.##2.4.187:37215
11#.###.89.111:37215
45.###.127.170:37215
20#.##6.220.0:37215
15#.##2.30.76:37215
22#.##9.153.43:7574
22#.##9.153.43:80
22#.##9.153.43:81
43.###.42.27:49152
43.###.42.27:8443
43.###.42.27:8080
16#.###.143.191:8080
11#.##7.89.111:80
45.###.127.170:80
15#.##2.30.76:80
10#.##2.4.187:80
12#.##5.29.109:80
20#.##6.220.0:80
26.###.133.123:80
17#.#4.77.56:80
22#.##9.184.49:80
20#.##.138.206:8080
18#.###.151.212:8080
20#.##8.126.99:8080
18#.##.21.253:8080
18#.##3.86.80:8080
20#.##.229.2:8080
21#.##2.151.212:80
21#.##8.126.99:80
95.##3.86.80:80
37.##.21.253:80
88.##.229.2:80
31.##.138.206:80
22#.##9.153.43:5555
14#.###.110.188:52869
63.##.47.34:52869
13#.###.193.237:52869
64.##.112.207:52869
19#.###.217.72:52869
21#.###.182.229:52869
21#.###.166.211:52869
73.###.73.190:52869
0.##.#23.50:52869
16#.##.24.13:52869
13#.###.193.237:8080
21#.###.182.229:8080
19#.##2.217.72:8080
64.##.112.207:8080
21#.###.166.211:8080
14#.###.110.188:8080
63.##.47.34:8080
0.##.#23.50:8080
73.###.73.190:8080
16#.##.24.13:8080
0.##.123.50:80
14#.###.110.188:37215
21#.###.182.229:37215
64.##.112.207:37215
63.##.47.34:37215
13#.###.193.237:37215
22#.###.182.237:7574
22#.##6.182.237:80
22#.##6.182.237:81
16#.###.113.193:49152
16#.###.113.193:8443
16#.###.113.193:8080
16#.###.158.251:8080
13#.##8.193.237:80
14#.##1.110.188:80
63.##.47.34:80
19#.##2.217.72:80
21#.##6.166.211:80
73.###.73.190:80
16#.#0.24.13:80
64.##.112.207:80
21#.##9.182.229:80
20#.###.184.121:8080
20#.##6.168.56:8080
20#.#.46.39:8080
20#.###.120.117:8080
18#.##6.213.21:8080
18#.###.155.198:8080
78.###.184.121:80
18#.##6.213.21:80
2.###.120.117:80
88.###.168.56:80
91.#.46.39:80
11#.##4.155.198:80
22#.###.182.237:5555
47.###.176.171:52869
31.###.89.227:52869
53.###.236.76:52869
14#.##.71.8:52869
86.###.176.2:52869
19#.##.16.48:52869
12#.###.95.236:52869
20#.##.70.107:52869
50.###.118.67:52869
15#.##.238.19:52869
31.###.89.227:8080
20#.##.70.107:8080
47.###.176.171:8080
12#.##1.95.236:8080
19#.##.16.48:8080
14#.##.71.8:8080
15#.##.238.19:8080
53.###.236.76:8080
50.###.118.67:8080
86.###.176.2:8080
31.###.89.227:37215
12#.###.95.236:37215
19#.##.16.48:37215
47.###.176.171:37215
20#.##.70.107:37215
7.###.99.187:7574
7.###.99.187:80
7.###.99.187:81
17#.#7.81.2:80
17#.##.81.2:49152
17#.##.81.2:8443
17#.##.81.2:8080
24.##.164.125:8080
12#.##1.95.236:80
31.###.89.227:80
19#.#1.16.48:80
20#.##.70.107:80
47.###.176.171:80
53.###.236.76:80
50.###.118.67:80
14#.#6.71.8:80
15#.##.238.19:80
86.##5.176.2:80
18#.##.211.204:8080
18#.##.44.19:8080
20#.###.251.244:8080
18#.##.144.228:8080
18#.##.133.231:8080
18#.##.174.94:8080
31.##.174.94:80
14#.#6.44.19:80
21#.##.144.228:80
14#.##.211.204:80
10#.##6.251.244:80
18#.##.133.231:80
7.###.99.187:5555
12#.###.207.177:52869
18#.###.234.251:52869
19#.##.183.104:52869
19#.##.156.215:52869
50.###.13.226:52869
83.###.216.114:52869
21.###.212.166:52869
17#.###.52.216:52869
62.###.167.237:52869
14#.##3.25.8:52869
18#.###.234.251:8080
19#.##.183.104:8080
12#.###.207.177:8080
50.###.13.226:8080
62.###.167.237:8080
19#.##.156.215:8080
17#.##9.52.216:8080
83.###.216.114:8080
14#.##3.25.8:8080
21.###.212.166:8080
83.###.216.114:37215
19#.##.183.104:37215
12#.###.207.177:37215
17#.###.52.216:37215
18#.###.234.251:37215
12#.###.176.109:7574
12#.##8.176.109:80
12#.##8.176.109:81
16#.##6.23.149:80
16#.###.23.149:49152
16#.##6.23.149:8443
16#.##6.23.149:8080
1.#.#3.42:8080
18#.##8.234.251:80
12#.##1.207.177:80
50.###.13.226:80
62.###.167.237:80
19#.##.183.104:80
19#.##.156.215:80
17#.##9.52.216:80
83.###.216.114:80
21.###.212.166:80
14#.#73.25.8:80
20#.###.102.121:8080
20#.##8.74.187:8080
18#.##3.49.201:8080
20#.##2.4.74:8080
20#.##9.18.209:8080
20#.##.38.207:8080
62.##.38.207:80
5.###.4.74:80
31.###.49.201:80
5.###.102.121:80
37.###.74.187:80
78.###.18.209:80
12#.###.176.109:5555
12.###.253.141:52869
22#.##7.5.88:52869
92.###.14.149:52869
19.###.209.14:52869
14.###.204.94:52869
22#.###.63.242:52869
28.###.23.174:52869
14#.##.166.217:52869
15#.##.86.11:52869
20#.###.204.119:52869
14.###.204.94:8080
92.###.14.149:8080
22#.##7.5.88:8080
12.###.253.141:8080
19.###.209.14:8080
22#.##6.63.242:8080
14#.##.166.217:8080
28.###.23.174:8080
20#.###.204.119:8080
22#.##6.63.242:80
15#.##.86.11:8080
14.###.204.94:37215
12.###.253.141:37215
22#.###.63.242:37215
92.###.14.149:37215
19.###.209.14:37215
15#.#.104.121:7574
15#.#.104.121:80
15#.#.104.121:81
15.##.193.186:80
15.##.193.186:49152
15.##.193.186:8443
15.##.193.186:8080
32.##.43.38:8080
12.###.253.141:80
14.###.204.94:80
22#.#57.5.88:80
19.###.209.14:80
92.###.14.149:80
14#.##.166.217:80
28.###.23.174:80
20#.##9.204.119:80
15#.#5.86.11:80
20#.##0.71.184:8080
20#.##4.154.95:8080
20#.##3.68.33:8080
20#.###.207.155:8080
20#.##.75.200:8080
20#.##7.217.93:8080
89.###.154.95:80
58.##3.68.33:80
11#.##3.207.155:80
58.###.217.93:80
91.###.71.184:80
14#.##.75.200:80
15#.#.104.121:5555
90.###.145.87:52869
46.###.150.58:52869
68.##.96.117:52869
10#.##8.5.6:52869
10#.##.160.202:52869
88.###.112.54:52869
52.###.162.187:52869
16#.##.156.243:52869
18#.##8.246.8:52869
80.###.124.45:52869
10#.##.160.202:8080
90.###.145.87:8080
88.###.112.54:8080
10#.##8.5.6:8080
80.###.124.45:8080
16#.##.156.243:8080
68.##.96.117:8080
46.###.150.58:8080
18#.##8.246.8:8080
52.###.162.187:8080
10#.##.160.202:80
10#.##8.5.6:37215
90.###.145.87:37215
16#.##.156.243:37215
46.###.150.58:37215
68.##.96.117:37215
13#.##9.240.74:7574
13#.##9.240.74:80
13#.##9.240.74:81
43.###.126.205:80
43.###.126.205:49152
43.###.126.205:8443
43.###.126.205:8080
21#.##.76.96:8080
90.###.145.87:80
88.###.112.54:80
10#.#68.5.6:80
80.###.124.45:80
16#.##.156.243:80
68.##.96.117:80
18#.##8.246.8:80
52.###.162.187:80
46.###.150.58:80
18#.###.208.212:8080
18#.##3.47.46:8080
20#.##.97.189:8080
18#.###.243.252:8080
20#.##5.84.188:8080
20#.##2.221.7:8080
42.##2.221.7:80
21#.##3.47.46:80
11#.##5.84.188:80
41.##.97.189:80
17#.##4.208.212:80
21#.##0.243.252:80
13#.##9.240.74:5555
20#.###.227.47:52869
90.###.61.52:52869
7.##.#36.126:52869
18#.#.43.134:52869
55.###.123.223:52869
80.###.83.150:52869
17#.##5.71.25:52869
56.##.240.251:52869
39.###.48.52:52869
81.###.99.78:52869
7.##.#36.126:8080
20#.##6.227.47:8080
18#.#.43.134:8080
55.###.123.223:8080
80.###.83.150:8080
17#.##5.71.25:8080
56.##.240.251:8080
90.###.61.52:8080
39.###.48.52:8080
81.###.99.78:8080
18#.#.43.134:37215
20#.###.227.47:37215
90.###.61.52:37215
55.###.123.223:37215
7.##.#36.126:37215
18#.##7.132.34:7574
18#.##7.132.34:80
18#.##7.132.34:81
10#.#.248.228:80
10#.#.248.228:49152
10#.#.248.228:8443
14#.##.242.4:8080
7.##.136.126:80
18#.#.43.134:80
55.###.123.223:80
17#.##5.71.25:80
81.##7.99.78:80
80.###.83.150:80
39.##4.48.52:80
90.##4.61.52:80
56.##.240.251:80
20#.##6.227.47:80
20#.##.180.29:8080
18#.###.140.148:8080
20#.###.109.145:8080
20#.##2.56.118:8080
20#.#5.3.7:8080
18#.###.173.187:8080
78.##7.9.233:80
92.###.223.81:80
92.#.207.93:80
19#.##.217.59:80
1.###.210.47:80
10#.##9.201.107:80
18#.##7.132.34:5555
15#.##7.6.207:52869
17#.###.47.237:52869
76.###.176.223:52869
12#.###.192.63:52869
19#.###.201.107:52869
11#.###.160.78:52869
48.###.88.189:52869
10#.###.67.153:52869
17#.##.217.59:52869
93.###.13.217:52869
17#.##0.47.237:8080
12#.##1.192.63:8080
76.###.176.223:8080
17#.##.217.59:8080
11#.##7.160.78:8080
10#.##3.67.153:8080
15#.##7.6.207:8080
19#.###.201.107:8080
48.###.88.189:8080
93.###.13.217:8080
19#.##9.201.107:80
17#.###.135.152:37215
15#.##.140.14:37215
21#.##9.94.37:37215
10#.##.115.134:37215
94.##.55.169:37215
15#.##.140.14:7574
15#.##.140.14:80
15#.##.140.14:81
23#.##.21.230:80
23#.##.21.230:49152
23#.##.21.230:8443
22#.##.208.70:8080
48.###.88.189:80
17#.##0.47.237:80
76.###.176.223:80
93.###.13.217:80
17#.##.217.59:80
12#.##1.192.63:80
10#.##3.67.153:80
11#.##7.160.78:80
15#.##7.6.207:80
20#.###.150.187:8080
18#.###.135.137:8080
18#.##6.98.27:8080
20#.##2.24.230:8080
20#.###.139.232:8080
20#.##.160.188:8080
42.##.52.212:80
11#.##2.204.97:80
11#.##2.25.74:80
2.##.114.6:80
14#.##8.35.34:80
92.##.222.72:80
15#.##.140.14:5555
18#.##4.6.162:52869
12#.##.86.222:52869
19#.##.52.212:52869
21#.##.102.204:52869
29.###.54.11:52869
17#.##8.35.34:52869
15#.###.232.120:52869
21#.##.222.220:52869
64.##.97.2:52869
4.##.#31.3:52869
18#.##4.6.162:8080
21#.##.102.204:8080
29.###.54.11:8080
12#.##.86.222:8080
17#.##8.35.34:8080
15#.###.232.120:8080
4.##.131.3:8080
21#.##.222.220:8080
19#.##.52.212:8080
64.##.97.2:8080
17#.##8.35.34:80
19#.##.52.212:80
74.##.80.178:37215
10#.##.76.75:37215
10#.##.242.191:37215
81.###.230.46:37215
10#.##.209.65:37215
81.###.230.46:7574
81.###.230.46:80
13.##.56.122:81
13.##.56.122:80
13.##.56.122:49152
13.##.56.122:8443
13#.###.189.133:8080
18#.##4.6.162:80
15#.##7.232.120:80
21#.##.102.204:80
29.##3.54.11:80
21#.##.222.220:80
64.##.97.2:80
4.##.131.3:80
12#.##.86.222:80
81.###.230.46:5555
20#.##.94.211:8080
18#.##.157.44:8080
18#.###.169.239:8080
20#.##1.64.104:8080
20#.###.236.151:8080
20#.##6.170.21:8080
82.##.222.66:80
37.###.93.196:80
78.###.113.205:80
37.##.213.109:80
18#.##.210.34:80
14#.##4.28.86:80
18#.###.134.28:52869
18#.###.10.250:52869
68.###.109.227:52869
81.###.93.196:52869
11#.###.19.204:52869
10.##.210.34:52869
22#.###.176.136:52869
89.##.4.128:52869
13#.###.33.222:52869
22.###.157.250:52869
10.##.210.34:8080
68.###.109.227:8080
13#.##5.33.222:8080
18#.##3.134.28:8080
18#.##1.10.250:8080
22#.###.176.136:8080
89.##.4.128:8080
81.###.93.196:8080
11#.##3.19.204:8080
22#.##1.176.136:80
22.###.157.250:8080
20.###.24.94:37215
22#.##.95.20:37215
21#.###.45.156:37215
20.##.197.72:37215
88.###.10.77:37215
88.###.10.77:7574
88.##0.10.77:80
19#.##3.58.106:81
19#.##3.58.106:80
19#.###.58.106:49152
19#.##3.58.106:8443
57.#.#40.188:8080
18#.##1.10.250:80
68.###.109.227:80
13#.##5.33.222:80
81.###.93.196:80
11#.##3.19.204:80
89.##.4.128:80
18#.##3.134.28:80
22.###.157.250:80
10.##.210.34:80
20#.##.149.86:8080
18#.##.206.10:8080
20#.#.189.166:8080
20#.###.206.209:8080
20#.##2.89.239:8080
18#.##.188.14:8080
21#.##.91.224:80
82.###.169.151:80
41.###.103.201:80
14#.##.71.112:80
37.##.49.10:80
42.##.24.225:80
88.###.10.77:5555
30.##.112.196:52869
88.###.221.169:52869
15#.###.227.45:52869
61.##.91.224:52869
15#.##.49.10:52869
15#.##.16.24:52869
16#.###.180.15:52869
6.##.#43.239:52869
99.###.169.121:52869
10#.###.29.145:52869
15#.##.16.24:8080
15#.##7.227.45:8080
15#.##.49.10:8080
16#.##2.180.15:8080
30.##.112.196:8080
6.##.#43.239:8080
88.###.221.169:8080
61.##.91.224:8080
10#.##5.29.145:8080
99.###.169.121:8080
21#.##6.2.204:37215
24.##.71.140:37215
14#.##.94.119:37215
74.###.105.105:37215
23#.##7.9.253:37215
23#.##7.9.253:7574
23#.##7.9.253:5555
23#.##7.9.253:80
18#.##.163.240:81
18#.##.163.240:80
18#.##.163.240:49152
11#.###.175.214:8443

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

DNS ASK:

ag######occnc.duckdns.org

Sends data to the following servers:

10#.##.166.210:47001

Receives data from the following servers:

10#.##.166.210:47001

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement