Linux.Packed.520

Technical Information

Malicious functions:

Launches itself as a daemon

Launches processes:

<SAMPLE_FULL_PATH> /usr/bin/sshd -D listen

Network activity:

Establishes connection:

21#.##8.191.61:2222
10#.##1.142.79:2222
<LOCAL_DNS_SERVER>
20#.##0.240.72:2222
31.###.85.56:2222
15#.##.196.70:2222
12#.##7.238.27:2222
17#.##0.106.35:2222
76.##.140.31:2222
85.###.182.68:2222
13#.##.196.196:2222
11#.##4.43.247:2222
14#.##8.249.45:2222
15#.##.134.75:2222
19#.##6.245.67:2222
20#.##4.42.13:2222
18#.##.16.182:2222
16#.##1.124.92:2222
30.###.131.61:2222
58.###.142.154:2222
20.###.219.37:2222
38.##.229.87:2222
22.##.49.183:2222
6.###.105.14:2222
17#.##.87.61:2222
15#.#.95.7:2222
10#.###.241.159:2222
81.###.214.245:2222
71.##.215.121:2222
21.##.35.74:2222
15#.###.135.214:2222
94.###.50.155:2222
13#.##.175.168:2222
13.###.167.56:2222
15.###.13.83:2222
86.###.194.51:2222
22#.##.171.66:2222
16#.##2.32.18:2222
13#.###.211.242:2222
20#.##.244.47:2222
13.##.12.27:2222
17#.###.146.195:2222
21.###.166.69:2222
26.###.133.240:2222
41.###.226.238:2222
14#.##9.189.39:2222
17#.##5.20.42:2222
10#.##3.92.74:2222
13#.##.151.11:2222
32.###.30.142:2222
97.###.61.90:2222
19#.###.100.212:2222
85.###.227.221:2222
18#.###.186.138:2222
18#.##.34.196:2222
47.#.#10.117:2222
9.###.239.117:2222
15#.##7.23.86:2222
54.###.201.206:2222
20.##.36.170:2222
27.###.72.29:2222
64.###.42.116:2222
72.###.171.128:2222
13#.###.178.188:2222
35.##.90.164:2222
31.##.69.132:2222
19#.##.179.190:2222
13#.###.237.237:2222
6.##.#25.157:2222
12#.##8.12.249:2222
10#.##9.43.91:2222
12#.###.216.166:2222
17#.##.219.30:2222
13#.##.116.102:2222
70.###.130.215:2222
19#.##.233.202:2222
13#.#.42.245:2222
18#.###.199.139:2222
14#.##6.29.81:2222
89.##.108.126:2222
18#.##.118.85:2222
45.###.85.141:2222
17#.##.109.28:2222
99.##.236.54:2222
15#.##3.55.115:2222
20#.##2.107.74:2222
20#.###.212.190:2222
57.##.180.208:2222
19#.##9.7.15:2222
48.###.193.209:2222
16#.##6.50.28:2222
39.###.135.66:2222
86.##.171.29:2222
21#.##.211.25:2222
83.###.191.213:2222
78.###.35.89:2222
19#.##.96.239:2222
25.###.166.169:2222
5.###.158.220:2222
12#.##7.139.10:2222
13#.##.179.213:2222
56.###.249.73:2222
63.##.137.84:2222
12#.##.138.149:2222
11#.##0.111.72:2222
19.#.#69.188:2222
65.##.174.188:2222
92.###.93.231:2222
12.###.247.235:2222
18#.##.175.151:2222
97.###.220.93:2222
98.###.196.59:2222
20#.##1.196.78:2222
19#.##7.230.20:2222
12#.##.146.76:2222
11#.###.249.218:2222
48.###.181.155:2222
32.##.156.115:2222
18#.##.23.176:2222
83.##.41.121:2222
37.##.55.6:2222
51.###.93.65:2222
14#.###.150.155:2222
13#.###.223.206:2222
17#.##.227.109:2222
18#.##5.8.166:2222
19#.##8.128.18:2222
16#.##.8.17:2222
17#.##2.53.216:2222
64.###.28.132:2222
10#.##5.90.209:2222
11#.##.111.37:2222
10#.##1.159.90:2222
11.##.126.88:2222
12#.##.151.15:2222
13#.###.106.116:2222
13#.###.151.139:2222
39.###.222.126:2222
16#.##0.31.175:2222
14#.##.244.176:2222
29.##.229.99:2222
21#.###.193.228:2222
25.###.202.106:2222
12.##.79.183:2222
18#.##.106.67:2222
56.###.208.242:2222
11#.##6.60.89:2222
17#.##.23.210:2222
62.##.210.105:2222
85.###.204.58:2222
43.##.230.110:2222
43.##.7.12:2222
21#.###.148.230:2222
15#.###.163.105:2222
20#.###.112.206:2222
7.###.113.22:2222
19#.###.118.216:2222
15#.##4.223.99:2222
59.###.118.189:2222
10#.##.183.164:2222
42.##.124.90:2222
30.#.#1.207:2222
16#.##.93.58:2222
21#.##3.185.78:2222
54.##.47.33:2222
18#.##.217.177:2222
56.###.181.23:2222
18#.##4.206.47:2222
15#.##.138.198:2222
91.###.226.132:2222
15#.###.106.201:2222
12#.##2.11.240:2222
11#.##5.142.31:2222
87.##.147.134:2222
53.##.185.168:2222
11#.###.157.191:2222
17#.###.164.144:2222
65.###.115.212:2222
66.##.88.96:2222
19#.##3.116.91:2222
18#.##.92.71:2222
8.##.#75.233:2222
21#.##.18.50:2222
16#.##.189.176:2222
14#.##.75.200:2222
16#.###.183.237:2222
65.###.62.76:2222
21#.##.8.233:2222
21#.###.107.112:2222
41.#.#82.238:2222
11#.##.160.210:2222
36.##.233.160:2222
17#.###.127.108:2222
41.###.216.39:2222
13#.###.212.234:2222
15#.##.247.98:2222
60.##.122.33:2222
11#.##.171.111:2222
22#.##.233.174:2222
19#.##.64.38:2222
12#.##.104.243:2222
49.##.195.59:2222
21#.##.228.139:2222
13#.##.95.169:2222
8.###.10.152:2222
17#.##.89.145:2222
16#.#.34.42:2222
21#.##6.167.71:2222
20#.##.23.238:2222
22#.##.110.124:2222
18#.###.186.233:2222
16#.###.127.161:2222
18#.##0.184.98:2222
13#.###.157.172:2222
37.###.169.150:2222
13#.###.218.190:2222
14#.###.214.229:2222
52.###.117.176:2222
25.###.58.41:2222
29.###.88.122:2222
44.##.248.209:2222
18#.##.108.132:2222
19#.##.93.167:2222
33.##.228.138:2222
39.###.246.210:2222
40.###.86.161:2222
13#.###.156.219:2222
13#.##.149.149:2222
12#.###.106.138:2222
16#.##.212.89:2222
14#.##3.158.51:2222
25.##.223.79:2222
15#.##8.39.183:2222
10#.##.26.222:2222
11#.##.152.230:2222
30.###.157.201:2222
13#.###.200.244:2222
13#.##8.50.247:2222
72.##.150.202:2222
38.##.20.75:2222
39.###.185.109:2222
97.###.104.5:2222
92.###.126.64:2222
42.###.69.50:2222
16#.##7.68.228:2222
49.##.89.128:2222
18#.##.207.178:2222
50.###.218.9:2222
97.##.246.89:2222
37.###.227.243:2222
19#.##.229.177:2222
76.##.48.229:2222
13#.##.141.236:2222
13#.###.122.201:2222
87.##.18.32:2222
11#.##.106.111:2222
18#.###.199.114:2222
18#.##.19.168:2222
16#.###.233.231:2222
17#.##.196.177:2222
16#.##.135.94:2222
18#.##.111.174:2222
18#.##.191.75:2222
17#.##.44.177:2222
5.###.209.99:2222
16#.##.198.108:2222
25.###.184.4:2222
66.###.93.157:2222
79.###.163.85:2222
8.##.#12.25:2222
17#.##.37.121:2222
18.##.150.103:2222
11#.##.68.37:2222
18#.###.224.107:2222
82.##.153.178:2222
12#.###.185.217:2222
17#.##.25.167:2222
35.###.185.30:2222
13#.###.145.142:2222
15#.##.135.42:2222
37.###.29.122:2222
82.###.217.236:2222
80.###.232.225:2222
18#.##.43.29:2222
19#.##.105.194:2222
19#.##4.4.40:2222
50.##.31.106:2222
71.##.240.135:2222
47.###.137.34:2222
18#.###.136.222:2222
20#.##3.150.83:2222
4.###.245.10:2222
28.##.20.101:2222
14#.##.11.75:2222
54.##.15.52:2222
32.##.77.87:2222
11#.###.181.161:2222
12#.##7.177.65:2222
21#.##.165.4:2222
13#.###.144.135:2222
11#.##1.166.64:2222
12#.###.117.247:2222
18#.##.246.198:2222
17#.##.241.45:2222
10#.##.83.16:2222
17#.###.166.123:2222
15#.##2.115.44:2222
66.###.172.85:2222
30.##.107.99:2222
57.##.143.184:2222
11#.###.247.175:2222
13#.##2.184.77:2222
54.###.6.132:2222
74.###.122.71:2222
16#.##8.233.16:2222
14#.##.67.103:2222
12#.##9.233.10:2222
43.###.238.100:2222
14.###.193.241:2222
56.###.58.98:2222
22#.##2.46.16:2222
10#.##.194.153:2222
55.##.14.193:2222
11#.###.143.175:2222
42.##.53.163:2222
18#.###.217.200:2222
90.##.182.145:2222
7.##.220.4:2222
19#.##1.63.221:2222
13#.##1.49.94:2222
10#.###.236.186:2222
84.###.167.73:2222
33.##.237.193:2222
50.##.75.24:2222
33.###.127.249:2222
73.###.230.36:2222
21#.##5.47.223:2222
14#.##2.132.89:2222
24.##.84.90:2222
19#.##.231.103:2222
17#.###.109.231:2222
18#.##.137.45:2222
16#.##.200.219:2222
38.##.45.103:2222
21#.##.145.59:2222
22#.##3.238.38:2222
15#.##.168.55:2222
86.##.177.109:2222
17#.##.19.225:2222
15#.##.219.157:2222
21#.##.153.29:2222
21#.##7.90.133:2222
5.##.33.19:2222
13#.###.138.117:2222
23.##.125.197:2222
14.##.108.95:2222
19#.##.97.30:2222
95.###.222.225:2222
91.##.53.98:2222
14#.###.132.155:2222
34.##.184.241:2222
21#.#.59.129:2222
19#.##.228.111:2222
81.###.13.143:2222
13.##.14.161:2222
59.###.84.39:2222
91.###.20.85:2222
11#.##0.81.129:2222
48.##.186.208:2222
15#.##.202.213:2222
70.###.86.185:2222
59.###.72.183:2222
17#.##7.21.28:2222
15.###.94.159:2222
17#.##.236.238:2222
40.##.132.111:2222
49.##.37.170:2222
10#.##.90.92:2222
13#.###.209.162:2222
14#.##.51.223:2222
10#.##9.52.35:2222
14#.##7.19.8:2222
21#.##3.21.166:2222
45.###.231.178:2222
20#.###.168.139:2222
10#.##.6.29:2222
14#.##.117.78:2222
41.###.209.86:2222
50.##.126.163:2222
12#.##.59.156:2222
12#.##.50.227:2222
45.##.231.94:2222
16#.##.204.118:2222
15#.##0.97.114:2222
87.##.194.173:2222
77.###.151.48:2222
60.###.161.188:2222
18#.##1.112.91:2222
18#.###.185.103:2222
15#.##.5.11:2222
11#.##.67.223:2222
19#.##.229.139:2222
34.###.27.118:2222
21#.##1.213.4:2222
10#.##.64.29:2222
10#.#.71.225:2222
18#.##5.171.50:2222
19#.##.149.117:2222
51.###.66.56:2222
20#.##.177.58:2222
13#.##9.86.17:2222
78.###.181.192:2222
21#.###.151.231:2222
12#.##8.12.194:2222
14#.##.197.101:2222
20#.##.159.161:2222
14#.##8.24.125:2222
16#.#.236.237:2222
16#.##.184.107:2222
17#.##.27.215:2222
50.###.51.127:2222
65.##.185.194:2222
19#.###.218.129:2222
83.##.35.227:2222
56.###.135.43:2222
22#.##.65.44:2222
49.##.57.67:2222
78.###.175.125:2222
38.###.85.178:2222
96.###.53.84:2222
15#.##6.146.9:2222
45.###.111.204:2222
17#.##.50.61:2222
19#.##.123.71:2222
25.##.114.153:2222
11#.##9.31.137:2222
15#.###.161.131:2222
19#.##.245.155:2222
14#.###.128.134:2222
71.###.206.212:2222
39.###.172.53:2222
18#.###.208.178:2222
65.##.206.33:2222
11.##.26.195:2222
99.##.31.188:2222
19#.##5.51.211:2222
12#.##.86.107:2222
80.###.220.208:2222
19#.##.60.111:2222
15#.##9.159.93:2222
10.##.28.20:2222
17#.###.156.109:2222
21#.###.136.174:2222
13#.##7.31.83:2222
96.##.39.6:2222
16#.##7.163.97:2222
20#.##.90.31:2222
74.##.83.43:2222
20#.###.183.126:2222
34.##.48.190:2222
74.###.48.124:2222
12#.##.53.124:2222
70.###.191.242:2222
19#.##.129.85:2222
10#.###.115.158:2222
24.##.168.6:2222
56.##.154.105:2222
79.##.54.148:2222
71.###.125.161:2222
18#.##3.168.75:2222
15#.###.173.104:2222
61.##.210.125:2222
18#.###.174.169:2222
13#.##.239.13:2222
15#.#.35.239:2222
14#.##2.141.21:2222
86.##.23.122:2222
10.###.182.246:2222
14#.##8.63.215:2222
13#.##.56.47:2222
15#.##6.161.46:2222
96.##.47.133:2222
90.##.24.234:2222
14#.##.248.80:2222
21#.##.5.82:2222
22#.##.19.179:2222
19#.##7.246.26:2222
19#.###.149.123:2222
70.###.235.217:2222
20#.##.61.175:2222
30.###.244.164:2222
21#.#.148.157:2222
13#.##7.21.123:2222
39.###.228.76:2222
39.##.121.137:2222
16#.##2.46.10:2222
21#.###.153.185:2222
20#.##.23.192:2222
11#.##.46.197:2222
20#.##0.88.137:2222
8.##.#06.234:2222
11#.##.63.224:2222
17#.##.93.168:2222
11#.##1.65.56:2222
59.###.162.194:2222
13#.##5.163.93:2222
14#.##.195.36:2222
22#.##.157.70:2222
83.##.242.117:2222
14#.###.219.103:2222
19#.###.247.101:2222
41.##.79.200:2222
17.##.41.157:2222
21#.##2.40.194:2222
64.###.111.29:2222
11#.###.108.127:2222
74.###.206.173:2222
49.###.137.114:2222
30.###.64.201:2222
16#.##1.245.17:2222
17#.##9.6.67:2222
22#.###.125.223:2222
16#.##1.157.60:2222
18#.##8.28.87:2222
21#.##.223.44:2222
97.###.243.223:2222
17#.##.125.130:2222
17#.##.88.56:2222
38.###.23.158:2222
67.##.21.159:2222
13#.##5.67.106:2222
47.##.169.101:2222
10#.###.152.227:2222
89.##.106.143:2222
19#.##0.27.52:2222
11#.###.116.119:2222
21#.##.15.204:2222
15#.###.139.172:2222
10#.##4.146.25:2222
14#.##1.86.246:2222
16#.###.155.207:2222
73.##.125.161:2222
21#.###.158.184:2222
98.###.236.71:2222
11#.##.62.122:2222
87.###.202.167:2222
17#.###.232.182:2222
14#.##3.36.55:2222
90.###.187.88:2222
18#.##.112.83:2222
14.#.#08.204:2222
92.###.99.178:2222
12#.##.4.23:2222
19#.##.172.155:2222
14#.##.200.138:2222
25.###.220.107:2222
14#.###.212.237:2222
12#.##.151.142:2222
20#.##8.130.39:2222
24.###.207.23:2222
46.###.156.105:2222
17#.###.110.200:2222
10#.###.244.199:2222
20#.##0.246.35:2222
12#.###.183.247:2222
19#.##.113.89:2222
52.###.35.115:2222
14#.##8.18.68:2222
16#.##3.20.164:2222
13#.##.156.172:2222
18#.##0.29.117:2222
19#.###.170.242:2222
34.##.217.48:2222
20.##.60.123:2222
12#.###.208.100:2222
35.###.244.15:2222
18#.##.221.5:2222
11#.##8.153.53:2222
83.###.216.5:2222
42.#.#78.144:2222
4.##.#5.227:2222
21#.###.153.194:2222
16#.###.150.207:2222
17#.###.232.249:2222
22#.##.86.106:2222
10.###.162.136:2222
15.##.15.154:2222
11#.##.195.109:2222
58.##.104.113:2222
91.###.191.102:2222
61.#.#39.70:2222
63.###.187.153:2222
86.##.200.121:2222
12#.##4.76.137:2222
10#.###.154.146:2222
10#.##.23.108:2222
62.###.241.22:2222
19#.###.180.239:2222
68.##.46.165:2222
19#.##9.49.246:2222
65.##.74.82:2222
20#.##3.128.7:2222
19#.###.248.112:2222
48.##.18.10:2222
18#.###.175.185:2222
15#.##6.222.33:2222
16#.##.170.161:2222
26.###.102.44:2222
21#.##.41.242:2222
16.##.201.105:2222
52.###.149.168:2222
61.##.80.155:2222
70.###.12.219:2222
20#.###.209.191:2222
5.###.214.192:2222
15#.##0.6.153:2222
49.###.152.8:2222
11#.##.180.111:2222
10#.##6.163.72:2222
60.##.80.237:2222
79.##.10.63:2222
19#.##.128.128:2222
17#.###.168.120:2222
31.###.246.179:2222
14#.##.141.217:2222
18#.##0.46.210:2222
11#.##.122.235:2222
17#.##.184.140:2222
20#.##2.173.30:2222
16#.###.230.168:2222
22#.##7.72.54:2222
15#.##.135.238:2222
13#.##0.4.132:2222
53.###.78.100:2222
13#.##.84.123:2222
17#.###.105.209:2222
16#.##.237.86:2222
21#.##4.239.56:2222
12#.##0.161.49:2222
35.###.74.136:2222
20#.###.227.106:2222
10#.##2.76.249:2222
15#.##4.93.11:2222
89.###.160.186:2222
15#.##.181.51:2222
14#.###.205.125:2222
8.##.#03.45:2222
38.##.157.236:2222
40.###.122.183:2222
13#.###.194.122:2222
30.###.221.191:2222
83.##.63.131:2222
83.###.208.221:2222
10#.###.147.114:2222
17#.##8.39.196:2222
99.##.166.96:2222
12#.##7.41.112:2222
17#.##3.4.82:2222
10#.##5.51.103:2222
21#.##.97.221:2222
21#.##4.249.4:2222
32.###.148.47:2222
18#.##3.195.27:2222
16#.##.242.179:2222
29.##.134.65:2222
22.##.6.153:2222
53.###.91.102:2222
12#.###.221.238:2222
12#.##.185.220:2222
83.###.174.210:2222
19#.##.110.129:2222
43.##.43.27:2222
73.###.174.133:2222
4.###.14.89:2222
15#.##6.59.52:2222
10#.##.110.223:2222
39.###.84.180:2222
19.###.89.142:2222
80.###.217.171:2222
10#.##5.194.54:2222
92.###.84.51:2222
12#.##3.9.243:2222
47.###.94.169:2222
11#.##.145.182:2222
44.#.#70.187:2222
22#.##8.7.53:2222
16#.##2.23.42:2222
17#.##.181.198:2222
60.###.24.155:2222
65.###.175.50:2222
63.##.130.183:2222
16.###.42.55:2222
14#.##.75.123:2222
21#.##.57.114:2222
10#.##9.120.31:2222
17.##.30.231:2222
65.###.92.105:2222
17#.##.146.126:2222
18#.##2.134.95:2222
11#.##.143.77:2222
62.##.204.188:2222
12#.##.169.9:2222
90.##.20.194:2222
48.###.246.245:2222
74.##.245.197:2222
21#.##.206.212:2222
41.##.167.170:2222
20#.##7.206.70:2222
56.##.219.150:2222
11#.##.54.214:2222
11#.##2.84.16:2222
20#.##4.86.7:2222
56.###.160.18:2222
18#.##.67.14:2222
13#.###.163.235:2222
10#.###.117.193:2222
64.##.144.199:2222
20#.###.209.127:2222
34.##.122.200:2222
10#.##.73.184:2222
14#.##8.235.89:2222
16#.##.202.53:2222
63.###.109.176:2222
91.###.8.223:2222
49.##.162.189:2222
14#.##.24.158:2222
11#.##7.203.22:2222
16.###.6.77:2222
61.###.78.67:2222
66.###.21.42:2222
41.###.146.225:2222
86.##.203.34:2222
16#.##.178.239:2222
92.##.240.65:2222
16#.###.150.106:2222
21#.##.146.143:2222
17#.##1.14.45:2222
95.###.195.161:2222
11#.###.144.131:2222
63.###.102.29:2222
22#.###.167.178:2222
57.##.244.170:2222
96.##.24.86:2222
17#.##.115.29:2222
17#.##9.154.73:2222
11#.##0.66.33:2222
68.##.82.157:2222
15#.##.215.111:2222
89.##.81.231:2222
18.##.43.79:2222
9.###.166.89:2222
13#.##0.22.38:2222
16#.###.158.101:2222
14.##.243.97:2222
14#.##1.212.57:2222
80.###.33.116:2222
16#.##6.9.149:2222
11#.##.249.14:2222
15#.##.130.23:2222
21#.##6.96.73:2222
14.###.138.126:2222
16#.##.127.121:2222
20#.##.45.105:2222
25.###.101.175:2222
11#.##9.56.247:2222
16#.##.24.210:2222
21#.###.114.206:2222
17#.##7.193.55:2222
62.###.193.11:2222
16#.##3.132.63:2222
21#.##.93.163:2222
19#.##6.199.12:2222
97.###.200.247:2222
46.##.65.107:2222
14#.##4.30.236:2222
15#.##1.51.200:2222
17#.##.156.123:2222
16#.##4.158.80:2222
17#.##9.26.167:2222
20#.##.6.49:2222
4.###.94.148:2222
73.###.17.82:2222
21#.#.76.25:2222
12#.##4.143.72:2222
59.##.33.240:2222
17#.##7.16.14:2222
25.###.41.64:2222
24.###.15.117:2222
20.###.20.17:2222
11#.###.141.107:2222
16.###.215.241:2222
13#.##.40.215:2222
85.###.60.148:2222
6.###.41.89:2222
20#.###.225.214:2222
15#.##4.51.5:2222
16#.###.128.119:2222
12#.##.69.111:2222
63.##.26.157:2222
4.##.72.26:2222
20#.##.211.122:2222
13#.##0.96.8:2222
81.###.79.130:2222
15.###.144.180:2222
17#.##0.73.202:2222
10#.#.156.125:2222
10#.##0.80.156:2222
40.##.181.126:2222
19#.##.18.85:2222
30.###.218.20:2222
92.###.140.115:2222
15#.###.160.173:2222
17#.###.130.208:2222
83.###.224.238:2222
10#.##4.23.137:2222
19#.###.199.155:2222
18#.###.246.104:2222

Attacks using a special dictionary (brute-force technique) via the SSH protocol

HTTP GET requests:

46.###.##.##############.############3%21lzb&os=linux_386&cpu=1&ver=3.0&st=256%2F45&country=unknown&mode=SSH&path=%2Ftmp&count=0&root=1&bind=1

DNS ASK:

wp#####vice.hldns.ru

Sends data to the following servers:

16#.##1.124.92:2222

Receives data from the following servers:

16#.##1.124.92:2222

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations