Linux.Siggen.5945

Technical Information

Malicious functions:

Removes itself

Launches itself as a daemon

Substitutes application name for:

Performs operations with the file system:

Deletes folders:

/null
/xconsole

Deletes files:

/null
/xconsole

Network activity:

Awaits incoming connections on ports:

127.0.0.1:2174

Establishes connection:

8.#.8.8:53
18#.##1.61.24:53
17#.##2.207.92:3257
17#.##3.46.33:3632
17#.##5.23.8:3632

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

DNS ASK:

tw##########arnforth-dr-sainthelens.pirate

Sends data to the following servers:

17#.##2.207.92:3257
17#.##3.46.33:3632
17#.##5.23.8:3632
16#.##5.85.246:2323
51.###.219.245:2323
14#.##1.148.34:2323
14#.###.138.172:2323
25.###.228.181:2323
19#.###.244.195:2323
16#.#.237.4:2323
18#.###.168.139:2323
13#.###.123.189:2323
19#.##8.169.4:2323
16#.##.108.220:2323
14#.##6.127.38:2323
20#.##4.10.141:2323
54.###.218.185:2323
21#.##.152.201:2323
12#.###.114.123:2323
14#.###.145.137:2323
20#.###.237.195:2323
21#.##1.68.182:2323
61.##.37.200:2323
17#.##2.8.213:2323
19#.##8.220.76:2323
21#.##1.97.64:2323
13#.##.76.4:2323
20#.##.121.26:2323
21#.###.131.124:2323
61.##.238.173:2323
77.###.31.93:2323
20#.##.23.255:2323
87.###.114.194:2323
18#.##4.159.93:2323
51.###.197.160:2323
16#.##3.6.251:2323
51.###.99.239:2323
92.##.238.18:2323
95.##.139.246:2323
17#.##.121.195:2323
95.###.145.241:2323
13#.##.142.243:2323
12#.###.139.111:2323
13#.##.59.253:2323
87.###.109.104:2323
13#.##.82.13:2323
8.###.142.180:2323
20#.###.248.202:2323
14#.##.122.47:2323
45.###.185.64:2323
13#.##.18.11:2323
16#.##4.131.97:2323
10#.##7.97.106:2323
12#.###.132.183:2323
93.##.228.133:2323
17#.###.114.249:2323
81.##.127.226:2323
65.##.252.35:2323
10#.###.127.189:2323
11#.###.217.201:2323
18#.##6.15.100:2323
22#.##0.198.19:2323
94.##.250.230:2323
15#.##.157.175:2323
38.##.30.144:2323
10#.##9.16.120:2323
46.##.158.4:2323
16#.###.119.168:2323
21#.#.153.184:2323
17#.##2.98.85:2323
20#.##6.215.18:2323
22#.###.186.114:2323
14#.###.198.146:2323
19#.###.151.145:2323
15#.##.142.180:2323
14#.##5.63.108:2323
14#.##.49.27:2323
11#.##2.244.23:2323
57.###.21.247:2323
60.###.208.192:2323
98.###.132.126:2323
18#.##5.43.143:2323
18#.##.36.123:2323
20#.##1.134.62:2323
16#.##.185.194:2323
17#.##.222.1:2323
16#.##7.202.8:2323
90.###.161.100:2323
11#.##6.17.7:2323
38.##.3.69:2323
50.###.139.91:2323
16#.##.218.138:2323
48.###.200.62:2323
15#.##1.52.89:2323
14#.##.223.51:2323
20.###.175.100:2323
20#.#.152.236:2323
22#.##4.35.175:2323
99.##.177.157:2323
85.###.73.43:2323
19#.##.100.116:2323
41.###.119.158:2323
54.##.251.171:2323
40.###.249.155:2323
81.###.87.248:2323
17#.##0.113.68:2323
53.##.133.176:2323
11#.##8.170.83:2323
19#.###.101.239:2323
73.###.25.93:2323
27.##.78.89:2323
5.###.2.23:2323
65.##.129.184:2323
20#.##4.32.173:2323
14#.##6.0.239:2323
16#.##4.64.186:2323
19#.##8.83.35:2323
69.##.197.94:2323
15#.###.154.163:2323
17.##.103.44:2323
10#.###.160.241:2323
20#.##.88.89:2323
19#.###.101.165:2323
31.##.223.164:2323
12#.##.13.109:2323
16#.###.219.115:2323
4.###.101.223:2323
18#.##2.101.11:2323
14#.##.71.199:2323
13#.##.160.72:2323
17#.###.213.244:2323
13#.###.105.114:2323
13#.##.6.255:2323
78.###.89.1:2323
11#.##.94.112:2323
23.##.183.8:2323
14#.##6.120.39:2323
77.###.181.106:2323
79.##.171.112:2323
15#.###.240.158:2323
11#.##2.97.166:2323
15#.##5.27.63:2323
67.###.237.173:2323
13#.##.21.67:2323
13#.##0.68.199:2323
78.###.132.49:2323
13#.##.182.197:2323
13#.##2.84.151:2323
99.##.171.45:2323
59.##.21.195:2323
20#.##.28.2:2323
14#.##.82.205:2323
52.###.178.181:2323
46.##.224.69:2323
31.##.190.184:2323
14#.##.74.162:2323
20#.##0.158.26:2323
18#.###.165.246:2323
87.###.120.137:2323
69.#.#87.98:2323
19#.##6.98.175:2323
36.###.151.40:2323
10#.##.8.147:2323
46.##.247.174:2323
12#.##.124.161:2323
20#.##.140.147:2323
17#.##9.94.248:2323
98.##.132.108:2323
18#.##6.217.97:2323
18#.##4.213.26:2323
16#.##.32.182:2323
90.##.244.219:2323
19.##.78.192:2323
20.###.108.244:2323
20.###.41.100:2323
25.##.214.240:2323
16#.##5.140.18:2323
11#.##6.95.152:2323
36.###.249.127:2323
10#.##8.21.93:2323
16#.##4.166.46:2323
78.###.63.231:2323
25.###.156.36:2323
11#.##.224.231:2323
42.###.5.218:2323
78.###.166.39:2323
19#.##.253.69:2323
12.###.72.249:2323
44.###.251.3:2323
71.###.238.179:2323
71.###.89.196:2323
17#.###.146.107:2323
10#.##.233.12:2323
48.###.92.115:2323
12#.##.154.65:2323
10#.##.254.38:2323
95.#.64.15:2323
20#.##.167.66:2323
14#.##.116.148:2323
74.###.56.137:2323
10#.##.212.170:2323
92.###.225.144:23
95.###.28.146:23
99.##.189.101:23
20#.##3.233.12:23
20#.#.25.34:23
52.###.49.174:23
15#.##6.131.242:23
16#.#.194.140:23
10#.##2.65.106:23
42.###.167.13:2323
20.###.124.233:23
16#.##1.122.248:23
65.###.198.41:23
10#.##3.211.111:23
17#.##5.112.31:23
14#.##3.47.104:23
71.###.93.100:23
20#.##2.201.109:23
14#.##2.246.241:23
88.###.72.202:2323
75.##9.238.5:23
39.###.106.134:23
20#.##7.161.108:23
92.##8.152.8:23
14#.#5.41.92:23
25.###.223.151:23
40.##.214.30:23
17#.##2.116.96:23
35.##.57.51:23
38.###.199.130:2323
21#.##7.41.37:23
21#.##6.115.197:23
60.###.84.150:23
43.###.238.244:23
20#.##.231.146:23
16#.##.246.46:23
20#.##3.32.82:23
12#.##7.251.134:23
20#.##3.9.147:23
87.###.247.2:2323
50.##5.159.0:23
12.###.208.114:23
16#.##.184.109:23
17#.##8.137.55:23
10#.##7.250.5:23
19#.##0.12.146:23
53.###.64.216:23
99.###.41.126:23
10#.##0.225.129:23
11#.###.156.154:2323
43.##.39.233:23
11#.##9.236.6:23
17#.#.19.230:23
21#.##7.6.144:23
12#.#4.3.28:23
20#.##3.176.0:23
89.##1.89.85:23
20.###.190.188:23
78.##.253.173:23
10#.##.5.108:2323
12#.##4.222.30:23
83.##9.26.58:23
14#.##.11.142:23
16#.##1.132.58:23
15#.##7.185.61:23
85.###.183.167:23
13#.##1.204.92:23
22#.##2.137.247:23
15#.##6.157.46:23
18#.##6.169.89:2323
47.###.155.12:23
17#.##9.19.137:23
16#.##6.49.124:23
18#.##.200.224:23
20.###.217.43:23
20#.#7.68.83:23
11#.#.162.155:23
20#.##.206.205:23
14#.##5.24.44:23
14#.###.196.108:2323
16#.##2.34.158:23
73.##.70.1:23
58.##3.33.37:23
16#.##4.31.244:23
21#.##.195.192:23
63.##.251.106:23
21#.##9.229.212:23
16#.#5.67.80:23
13#.##7.174.148:23
22#.###.192.208:2323
24.###.98.193:23
5.##.187.155:23
12#.#9.77.36:23
37.###.186.80:23
86.##7.8.185:23
19#.##3.161.224:23
17#.##5.246.245:23
17.##.75.207:23
12#.##8.46.199:23
15#.##5.155.35:2323
66.###.120.45:23
18#.##.131.154:23
59.##.252.186:23
22#.##.138.205:23
4.###.9.214:23
81.###.92.126:23
11#.##3.219.130:23
65.##.184.177:23
21#.##.219.196:23
17#.##7.228.22:2323
17#.##2.241.10:23
10#.##.162.216:23
76.###.124.186:23
2.##.116.153:23
99.###.243.162:23
10#.##.51.194:23
12#.##.91.128:23
74.###.147.95:23
15#.##.238.213:23
10#.##.12.88:2323
41.##1.3.162:23
13#.##.172.207:23
12#.##.252.62:23
17#.##.40.173:23
66.###.163.237:23
12#.#.35.36:23
91.##6.32.75:23
58.###.156.14:23
41.##.136.114:23
34.###.90.11:2323
17#.##7.222.80:23
19#.##5.251.64:23
15#.##1.190.146:23
13#.##4.177.27:23
16#.##5.58.98:23
92.#.118.32:23
15#.#.117.239:23
17#.##.213.115:23
19#.##3.194.103:23
91.##.28.113:2323
19#.##.95.124:23
15#.##8.88.208:23
20#.##6.222.209:23
53.###.200.61:23
14.###.229.87:23
13#.##4.120.13:23
44.##.161.94:23
21#.#8.92.22:23
12#.#0.82.18:23
16#.##.189.65:2323
19.##.237.152:23
59.##2.121.6:23
16#.##6.166.28:23
22#.##0.60.125:23
15#.##.168.141:23
88.##.206.239:23
19#.##1.29.115:23
17.#.39.46:23
17#.##.118.187:23
15#.##9.117.13:2323
19#.##.98.130:23
20#.##.180.183:23
18#.##2.6.231:23
84.##.213.36:23
18#.##4.213.232:23
17#.##.236.25:23
2.##.93.209:23
20#.##.117.73:23
92.##.72.176:23
20#.##.216.206:2323
50.##.208.34:23
22#.##4.250.45:23
11#.##1.163.236:23
16#.##7.174.190:23
22#.##8.150.129:23
20#.##0.218.125:23
78.###.129.246:23
14.##.189.248:23
78.##.170.189:23
23.##.185.40:2323
14#.##1.32.19:23
10#.##4.180.123:23
82.##.1.181:23
18#.##.232.18:23
58.###.31.214:23
78.###.13.227:23
10#.##5.166.183:23
20#.##0.31.252:23
16#.##7.221.173:23
97.###.81.221:2323
14#.##4.106.24:23
12#.##1.212.200:23
68.##.5.214:23
13#.##.156.157:23
78.###.237.82:23
16#.##.58.149:23
41.##.26.126:23
17#.#8.51.70:23
81.###.180.237:23
19.##.223.130:2323
13#.##9.179.131:23
19#.##.188.140:23
14#.##.43.154:23
47.##.32.110:23
20.###.111.173:23
18.##.22.81:23
50.##.133.63:23
15#.##7.47.111:23
27.###.62.148:23
20#.##5.41.142:2323
72.##.4.148:23
21#.##8.189.243:23
79.##.13.214:23
89.##0.2.141:23
20#.##.100.206:23
14#.##5.187.121:23
18#.##1.225.217:23
19#.##.26.152:23
12#.##.229.66:23
81.##.120.132:2323
51.#.179.96:23
13#.##9.240.43:23
17#.##3.127.103:23
15#.##0.31.66:23
64.###.15.175:23
11#.##9.124.211:23
85.#.135.92:23
21#.##3.219.51:23
52.###.155.54:23
14#.##.163.24:2323
97.##.16.55:23
46.##4.200.7:23
17#.##.217.171:23
68.###.242.25:23
81.###.19.153:23
17#.##2.23.130:23
69.###.169.30:23
40.###.61.255:23
13#.##1.102.166:23
15#.##0.154.89:2323
21#.##9.161.10:23
10#.##2.151.49:23
93.##.98.13:23
92.##.98.172:23
1.##.173.241:23
77.##.78.9:23
17#.##7.112.32:23
87.###.79.242:23
15#.##4.194.24:23
4.###.143.74:2323
5.##.231.37:23
16#.#.195.238:23
20#.##.250.113:23
10#.##6.121.20:23
85.###.115.169:23
15#.##.90.224:23
20#.##.58.252:23
12#.##6.62.57:23
96.###.173.250:23
10#.##.244.212:2323
45.###.239.175:23
19.###.48.114:23
34.##.89.226:23
46.##.50.56:23
16#.##.138.203:23
38.###.251.133:23
10#.##8.130.172:23
18#.##0.100.58:23
16#.##6.102.199:23
13#.##.88.11:2323
17#.##5.141.88:23
13#.##.67.177:23
57.###.40.127:23
18#.##.129.92:23
14#.##2.24.119:23
16#.##7.55.124:23
16#.##2.193.158:23
15#.##7.155.94:23
19#.#.163.2:23
14#.###.115.169:2323
98.###.237.145:23
15#.##6.253.145:23
91.##.185.234:23
18#.##.81.202:23
53.##.133.61:23
61.##.26.88:23
22#.##5.98.251:23
21#.##3.246.2:23
14#.##1.100.9:23
18#.##.218.186:2323
15#.##4.116.151:23
16#.##.46.220:23
14#.##0.38.138:23
11#.##8.116.17:23
11#.##2.227.187:23
15#.##.20.235:23
10#.##.136.60:23
31.##.68.22:23
11#.##4.31.144:23
14#.##.70.13:2323
19#.##7.202.129:23
70.##.195.102:23
16#.##5.15.150:23
17#.##1.227.205:23
10#.##.131.149:23
68.###.151.132:23
43.###.148.229:23
73.##.205.142:23
13#.##.154.165:23
18#.###.229.115:2323
13#.##5.95.150:23
43.###.37.119:23
15#.##8.13.32:23
61.###.103.94:23
86.###.230.137:23
12#.##9.230.171:23
45.##.188.29:23
19#.#1.12.14:23
82.###.65.232:23
13.###.132.0:2323
4.#.#1.165:23
20.###.217.34:23
23.##.64.128:23
12.###.180.183:23
85.##.159.58:23
20#.##9.119.54:23
10#.##8.91.103:23
20#.##.75.145:23
31.#.62.114:23
19#.##7.3.231:2323
14#.#2.0.75:23
21#.##0.167.43:23
15#.##7.131.13:23
69.##.199.204:23
13#.##7.208.243:23
24.###.211.199:23
14#.##.57.211:23
12#.##0.144.239:23
17#.#8.127.9:23
34.###.108.224:2323
13#.##.180.52:23
59.##.189.23:23
86.##2.68.48:23
47.##.23.245:23
16#.##3.167.192:23
20.##.33.41:23
15#.##1.168.146:23
46.##.127.137:23
2.##.4.211:23
11#.##6.129.51:2323
13#.#3.8.220:23
18#.##4.33.231:23
15#.##2.47.36:23
45.###.175.151:23
20#.##8.244.67:23
95.##.250.89:23
14#.##.150.131:23
15#.##6.138.93:23
16#.##1.232.158:23
11#.##1.67.212:2323
24.###.227.233:23
13#.##3.122.220:23
11#.##5.61.118:23
43.###.253.172:23
22#.##4.14.23:23
12#.##5.106.138:23
12#.##7.243.49:23
10#.##.241.51:23
63.##.182.202:23
20#.##.77.90:2323
12#.##8.91.16:23
51.###.105.108:23
15#.##3.167.251:23
13#.##.100.130:23
22#.##3.124.250:23
17#.##5.116.89:23
20#.##.132.236:23
14#.##.130.215:23
19#.##0.193.16:23
17.##.230.88:2323
59.###.222.103:23
14.##.100.21:23
17.###.216.120:23
97.##.230.0:23
12#.##8.72.11:23
20#.##.238.219:23
17#.##3.37.238:23
17#.##.16.197:23
21#.##1.222.180:23
34.###.23.87:2323
20.###.176.36:23
20#.#.218.109:23
54.###.116.168:23
20#.##6.91.103:23
10#.##4.31.225:23
46.##9.36.78:23
19#.##3.245.148:23
60.###.160.164:23
46.#.36.127:23
63.###.17.36:2323
21#.##7.118.22:23
12#.##4.73.229:23
36.##5.92.41:23
13#.##0.186.63:23
53.##.202.209:23
23.###.14.114:23
21#.##6.32.124:23
11#.##.30.191:23
21#.##.105.226:23
15#.##4.31.166:2323
13#.##.10.110:23
17#.##0.237.250:23
82.###.104.11:23
12#.##.200.84:23
12#.##4.227.10:23
24.#.86.100:23
19#.##0.134.98:23
17#.##.18.223:23
18#.##5.45.179:23
99.##.127.0:2323
81.###.31.111:23
85.##.12.203:23
18#.##2.25.30:23
19#.##.37.105:23
21#.##3.114.84:23
83.###.176.132:23
11#.##1.6.154:23
10#.##9.56.30:23
75.###.208.227:23
59.##.87.135:2323
17#.##.139.135:23
17#.##5.253.252:23
15#.##0.145.78:23
10#.##1.57.187:23
1.###.151.98:23
22#.##9.130.119:23
17#.##9.91.176:23
66.##4.6.117:23
11#.##3.74.162:23
65.###.254.133:2323
58.##.209.167:23
67.###.160.118:23
74.###.143.59:23
10#.##.135.88:23
66.##2.186.9:23
16#.##5.88.192:23
54.###.57.202:23
79.###.11.158:23
14#.##4.57.42:23
17#.###.113.164:2323
10#.##.188.153:23
13.###.179.105:23
59.##.148.255:23
13#.##1.81.198:23
16#.##4.170.69:23
14#.#.223.217:23
17#.##3.98.90:23
46.#.178.44:23
19#.#5.81.65:23
11#.##0.143.35:2323
16#.##7.235.56:23
17#.#0.6.87:23
21#.##6.140.218:23
21#.##8.202.129:23
18.###.255.240:23
58.##6.51.34:23
12#.##5.13.179:23
11#.##8.228.20:23
78.##.89.94:23
21#.##.162.146:2323
16#.##.222.142:23
5.###.26.5:23
17#.##4.103.117:23
14.##.153.137:23
20#.##1.237.14:23
68.##.109.9:23
57.###.206.18:23
5.###.156.26:23
19#.##0.104.73:23
67.##.121.23:2323
14#.##5.254.72:23
18#.#8.23.43:23
18#.##7.182.5:23
21#.##6.161.68:23
14#.#5.9.129:23
13#.#0.22.27:23
21#.##.90.251:23
90.##.190.221:23
18#.##5.1.253:23
57.###.55.147:2323
93.##6.247.4:23
14.##.89.124:23
13#.##1.169.180:23
15#.#.78.44:23
14#.#0.33.3:23
11#.##5.238.157:23
66.##.18.73:23
20#.##9.190.66:23
17#.##6.67.187:23
21#.###.207.180:2323
17#.##3.113.238:23
8.###.41.37:23
11#.#1.28.22:23
15#.##3.71.27:23
15#.##2.77.39:23
72.###.54.216:23
16#.##3.216.178:23
80.##.54.75:23
99.###.90.236:23
12#.##0.20.178:2323
16#.##.110.237:23
19#.##1.251.241:23
14#.##7.141.245:23
10#.#8.205.9:23
20#.##6.99.57:23
84.##.114.168:23
15#.##4.231.235:23
15#.##5.200.200:23
20#.##5.250.104:23
19#.##.108.106:2323
75.##1.85.34:23
20#.##5.233.205:23
11#.#9.59.35:23
20#.##6.70.46:23
20.###.22.181:23
19#.##3.107.9:23
22#.##6.65.197:23
16#.##.166.12:23
11#.##5.15.40:23
64.##.10.229:2323
98.###.231.90:23
94.###.62.217:23
19#.##7.131.147:23
16#.#7.95.94:23
90.###.241.161:23
77.###.72.216:23
75.###.233.73:23
60.##.57.249:23
20#.##.76.134:23
2.##.#9.148:2323
17#.##.206.164:23
16#.##3.221.221:23
19#.##.101.158:23
19#.##0.226.112:23
89.##.144.12:23
94.##.67.55:23
20#.##.124.123:23
45.###.176.132:23
12#.##8.241.120:23
14#.##.246.53:2323
13#.##5.184.44:23
2.##.118.105:23
81.##.229.183:23
19#.##.210.75:23
99.###.141.120:23
10#.#2.46.24:23
17.##.247.32:23
11#.##2.25.21:23
63.##3.16.51:23
10#.##6.41.57:2323
24.##.175.130:23
19#.##1.146.124:23
21#.##3.245.10:23
12#.##.202.209:23
22#.##4.114.215:23
17#.##0.37.148:23
85.##.13.42:23
15#.##2.70.215:23
13.#.135.173:23

Receives data from the following servers:

17#.##2.207.92:3257

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations