Linux.Siggen.6173

Technical Information

Malicious functions:

Launches itself as a daemon

Substitutes application name for:

rpcbind

Performs operations with the file system:

Creates symlinks:

/root/2f726f6f742f5099dabf

Creates or modifies files:

/proc/507/cmdline

Network activity:

Awaits incoming connections on ports:

0.0.0.0:51925

Establishes connection:

8.#.8.8:53
17#.##.210.240:51925

Attacks using a special dictionary (brute-force technique) via the Telnet protocol.

Sends data to the following servers:

21#.##7.200.221:23
13#.##6.65.234:23
19#.##.141.198:23
14#.##1.245.79:23
15#.##9.61.169:23
21#.##8.124.17:23
19#.##6.60.191:23
14#.##4.87.162:23
4.#.#41.28:23
22#.##5.191.143:23
15#.#.209.159:23
13#.##8.26.87:23
10#.##.166.66:23
12.#.223.176:23
10#.##.202.136:23
13#.##.105.218:23
14#.##.102.174:23
46.##.56.61:23
13#.##.12.174:23
22#.##1.176.212:23
13#.##7.238.49:23
11#.##8.63.254:23
12.###.217.48:23
15#.##4.226.224:23
42.###.34.157:23
20#.##2.159.148:23
16#.##8.108.115:23
21#.##5.186.74:23
14#.#1.34.71:23
20#.##.251.137:23
10#.##9.252.47:23
19#.#.210.49:23
11#.##3.93.51:23
20#.##.245.68:23
15#.##.144.222:23
15#.##.177.51:23
42.##.189.230:23
16#.##.253.59:23
18#.##9.49.32:23
67.##.170.170:23
24.##7.80.3:23
18#.##4.70.180:23
20#.##5.51.89:23
15#.##.230.174:23
76.##.89.201:23
17#.##2.186.166:23
11#.##8.204.111:23
12#.##4.167.205:23
61.##.81.187:23
69.###.111.104:23
16#.##1.130.143:23
22#.##5.175.253:23
20#.##1.132.230:23
4.###.227.223:23
21#.#3.47.3:23
14#.##2.36.195:23
14#.##.121.30:23
65.###.207.55:23
20#.##2.70.240:23
13#.##3.229.19:23
16#.##3.228.146:23
5.###.92.234:23
70.###.127.146:23
73.##.17.202:23
14.##2.43.5:23
20#.##.230.48:23
20#.##1.11.251:23
20#.##5.93.175:23
10#.##8.229.198:23
97.###.114.217:23
12#.##1.183.197:23
11#.##.243.227:23
11#.##.227.105:23
49.#.163.133:23
10#.##.71.224:23
85.##8.82.66:23
14#.##7.40.110:23
13#.##0.231.123:23
13#.##9.74.38:23
31.##.126.74:23
17#.##4.225.32:23
38.##.112.114:23
16#.##8.160.18:23
1.###.24.254:23
21#.##9.208.67:23
19#.##9.253.85:23
20#.##4.136.28:23
14#.##.132.121:23
86.###.109.116:23
41.##.143.183:23
17#.##.234.211:23
98.##4.89.28:23
12#.##.183.176:23
19#.#22.36.3:23
18#.##6.102.189:23
15#.##.131.62:23
43.##.36.29:23
15#.##6.193.34:23
73.##.14.22:23
85.###.213.170:23
18#.##.74.171:23
60.##2.95.7:23
52.###.47.199:23
14#.##3.42.94:23
19#.##1.123.207:23
12#.##6.240.240:23
13#.##8.17.16:23
69.###.226.159:23
62.###.89.122:23
15#.#.94.196:23
68.##.87.217:23
8.###.33.43:23
10#.#9.46.85:23
72.###.249.113:23
21#.##8.160.13:23
35.##.3.97:23
24.##.8.218:23
13.##.30.69:23
12#.#9.85.11:23
12#.##2.96.51:23
9.###.0.172:23
85.##.163.10:23
62.###.208.251:23
73.##7.0.242:23
16#.##5.171.208:23
15#.#4.64.62:23
96.###.244.203:23
80.###.110.168:23
15#.##4.135.110:23
92.###.64.185:23
18.##.120.241:23
15#.##.116.117:23
32.##3.95.31:23
69.###.38.142:23
41.##7.7.50:23
67.###.172.221:23
18#.##2.4.219:23
81.###.246.161:23
21#.##.165.96:23
80.##.245.54:23
17.##.82.85:23
10#.##9.187.187:23
66.###.175.95:23
21#.##.146.189:23
17#.##5.81.152:23
38.##.147.4:23
44.###.117.182:23
40.###.61.216:23
38.###.203.234:23
2.##.252.97:23
13#.##3.241.50:23
11#.##6.243.116:23
17#.##9.202.40:23
70.###.249.140:23
14#.##3.138.6:23
81.###.253.39:23
19#.##7.31.207:23
11#.##6.210.129:23
85.##.161.96:23
20#.##1.212.52:23
20#.##1.141.159:23
22#.##.133.125:23
12#.##.169.87:23
20#.##.52.220:23
13#.#.120.142:23
14.###.234.145:23
91.###.96.195:23
14#.##.222.147:23
13#.#8.12.34:23
19#.##6.231.99:23
60.###.109.147:23
13#.#.14.72:23
14#.##2.111.150:23
86.##.80.232:23
12#.##.92.208:23
86.###.241.183:23
15#.##8.54.29:23
10#.##5.137.213:23
17#.##8.26.115:23
25.##.49.0:23
90.##.91.53:23
12.###.123.139:23
73.##.72.13:23
11#.##4.208.230:23
16#.##7.109.250:23
17#.##.243.18:23
21#.##.163.34:23
10#.##5.247.61:23
20#.##9.18.135:23
12#.##5.168.83:23
96.###.252.151:23
14#.##0.71.133:23
72.###.124.67:23
12#.##.144.240:23
54.##6.99.39:23
81.###.22.229:23
19#.#61.1.17:23
20#.##1.129.70:23
22#.##3.15.207:23
70.###.32.159:23
17.###.237.63:23
20#.##7.185.21:23
12#.##.208.250:23
18#.##3.105.120:23
53.###.73.231:23
19#.##0.28.119:23
25.###.65.137:23
16#.##6.72.183:23
45.#.81.253:23
13#.##.215.232:23
75.###.15.134:23
92.###.240.59:23
57.##.127.122:23
92.###.37.117:23
47.##.218.72:23
18#.##.209.173:23
11#.#6.140.6:23
13#.##5.228.127:23
21#.##2.227.90:23
69.###.119.194:23
16#.##3.158.30:23
21#.##6.10.64:23
27.###.134.104:23
49.###.23.126:23
15#.##0.104.128:23
51.##3.69.15:23
73.###.34.214:23
20#.##5.1.173:23
10#.##0.89.43:23
17#.##.221.51:23
42.###.213.198:23
53.###.22.154:23
57.###.87.249:23
54.###.144.242:23
16#.##.252.225:23
92.##.46.33:23
5.##.29.113:23
17#.##.204.141:23
22#.##4.186.79:23
92.###.117.47:23
73.##.85.198:23
10#.##5.169.44:23
20#.##1.163.187:23
18#.##.180.145:23
18#.##1.192.150:23
42.###.198.60:23
73.##.9.217:23
51.##.97.189:23
93.##.19.206:23
19#.##.115.193:23
47.###.66.222:23
69.###.163.83:23
18#.##2.62.55:23
13#.##.100.162:23
74.##.106.254:23
13#.##3.134.62:23
16#.##4.216.80:23
48.###.247.27:23
42.##6.67.15:23
54.##2.82.16:23
19#.##2.89.90:23
21#.##2.206.182:23
18#.##0.121.155:23
16#.##.224.77:23
44.###.151.241:23
40.##.112.117:23
20#.##8.94.37:23
20#.##2.213.174:23
69.##.209.91:23
41.##5.14.64:23
22#.##7.128.114:23
70.###.236.150:23
65.##.153.215:23
11#.##1.242.88:23
13#.##8.189.181:23
73.###.119.223:23
74.###.94.172:23
19#.##2.61.200:23
38.###.242.43:23
15#.##2.238.167:23
20#.##4.154.134:23
57.###.138.208:23
19#.##3.66.24:23
21#.##.246.63:23
17#.##0.75.252:23
74.###.168.30:23
22#.##2.71.174:23
19#.##5.134.50:23
35.#.230.91:23
63.##.253.169:23
68.###.196.100:23
16#.##7.193.147:23
15#.##.216.193:23
10#.##.210.72:23
64.##8.64.68:23
18#.##9.42.50:23
14#.##5.224.38:23
21#.##0.36.172:23
71.##.119.6:23
15#.##4.241.151:23
47.##6.74.3:23
68.###.219.198:23
8.###.41.222:23
89.##.233.10:23
18#.##4.146.214:23
14#.##8.96.70:23
53.##2.77.74:23
15#.#23.1.32:23
10#.##5.44.27:23
22#.#1.2.37:23
4.###.228.211:23
73.##2.4.243:23
19#.##.19.134:23
59.###.199.24:23
44.##.64.85:23
11#.##9.138.238:23
38.###.52.121:23
16#.##.255.185:23
14#.##.177.86:23
57.###.125.95:23
10#.##.201.153:23
79.#.22.201:23
11#.##.195.201:23
16#.#2.26.9:23
64.##0.76.69:23
78.##.73.43:23
12#.##.203.12:23
72.##.55.159:23
11#.##9.157.203:23
54.##4.35.4:23
17#.##9.176.51:23
39.##.243.209:23
12#.##5.245.2:23
12#.##4.208.0:23
12#.##.195.180:23
61.##.27.112:23
20#.#.145.169:23
64.##.211.177:23
17#.#5.21.23:23
22#.##7.120.201:23
58.##5.100.2:23
50.##.198.238:23
17#.##.77.195:23
10#.##2.230.208:23
20#.##5.58.80:23
19#.##6.240.176:23
15#.##.233.94:23
16#.##.196.246:23
25.##.170.13:23
22#.##8.138.2:23
16#.##9.214.53:23
11#.##9.111.145:23
12#.##.163.162:23
13#.##0.114.132:23
15#.##.221.18:23
67.##.174.233:23
16#.##6.47.207:23
17#.##0.44.113:23
14#.##8.197.44:23
15#.##5.125.3:23
34.#.240.13:23
17#.##2.83.123:23
11#.#23.96.3:23
13#.##3.97.62:23
18#.##1.195.141:23
18.##3.148.5:23
19#.#1.91.55:23
17#.##5.188.170:23
90.###.133.23:23
13#.##2.86.32:23
20#.##7.95.30:23
22#.##.174.250:23
65.###.184.30:23
11#.##.128.56:23
16#.##9.166.31:23
37.##.168.146:23
50.##.248.21:23
13#.#8.50.40:23
83.##0.6.26:23
19#.##9.165.169:23
66.##.175.232:23
25.##.52.196:23
12#.##8.99.67:23
19#.##.81.189:23
17#.#8.3.88:23
19#.##.234.175:23
49.##.160.146:23
16#.##.83.232:23
12#.##8.234.31:23
13#.##5.99.238:23
99.###.127.117:23
18#.##3.102.228:23
65.##1.0.223:23
21#.##.241.155:23
17#.##9.88.142:23
21#.##.220.42:23
18#.##5.111.120:23
45.##.30.245:23
10#.##3.6.168:23
21#.##.110.42:23
14#.##2.29.95:23
15#.##.227.28:23
18#.##2.102.107:23
11#.##.114.145:23
83.###.65.178:23
51.##8.7.158:23
14#.##.42.238:23
19#.##8.153.238:23
12#.#3.0.106:23
91.##.86.41:23
16#.##.204.24:23
10#.##1.32.83:23
11#.##0.233.57:23
86.##3.95.50:23
71.###.153.206:23
19#.##.140.254:23
19.##.47.113:23
36.###.239.113:23
21#.##8.77.98:23
93.###.162.232:23
20#.#52.9.78:23
61.##2.33.42:23
36.###.232.230:23
65.##.129.33:23
16#.##9.79.198:23
11#.##8.66.109:23
12#.#.54.106:23
64.##.242.86:23
20#.##.52.138:23
12#.##.197.158:23
18#.##2.75.213:23
18#.##.220.245:23
40.###.68.229:23
21#.##9.179.29:23
95.###.127.180:23
46.##.59.179:23
19.###.101.221:23
19#.#2.52.50:23
21#.##4.133.118:23
19#.##0.163.181:23
15#.##0.214.59:23
11#.##7.102.177:23
14#.##.133.19:23
54.###.187.94:23
20.##.103.52:23
14#.##.171.117:23
16#.##.123.217:23
16#.##4.44.219:23
2.###.73.98:23
14#.##6.23.121:23
2.##.247.178:23
67.##4.71.0:23
47.#.109.207:23
18#.##8.233.75:23
22#.#0.35.47:23
70.###.219.209:23
79.##0.2.1:23
10#.##.166.175:23
12#.##0.60.138:23
20#.#.101.250:23
18#.##6.242.63:23
21#.##0.71.252:23
65.###.208.13:23
11#.##5.117.60:23
13#.##0.165.181:23
27.###.167.188:23
48.###.237.150:23
10#.##3.124.168:23
21#.##4.189.147:23
10#.##.224.128:23
22#.##.217.11:23
13#.##3.31.51:23
21#.#8.60.19:23
14#.##7.198.92:23
13#.##7.68.141:23
79.#.242.0:23
74.###.193.140:23
24.##0.61.53:23
14#.##.39.183:23
1.##.193.150:23
13#.##.150.24:23
88.###.137.140:23
10#.##0.32.119:23
38.##.84.157:23
10#.##8.87.99:23
11#.##9.241.94:23
13#.##7.23.73:23
31.##5.5.170:23
18.#.184.32:23
48.###.172.150:23
86.##.43.17:23
92.##.131.67:23
95.###.241.125:23
24.###.167.149:23
13#.##.173.239:23
59.###.174.163:23
19#.##.100.146:23
20#.##2.80.180:23
94.###.241.63:23
10#.##5.201.122:23
86.##.43.111:23
8.##.116.135:23
13#.#61.56.0:23
16#.##4.19.191:23
85.##.63.102:23
31.###.196.196:23
18#.##2.105.232:23
19#.##9.177.74:23
83.##.164.119:23
18#.##4.71.191:23
19#.##1.213.93:23
54.###.200.229:23
21#.##.164.229:23
15#.##8.236.236:23
17#.##2.232.59:23
40.###.251.200:23
50.###.79.114:23
15#.##4.159.252:23
10#.##6.236.84:23
12#.##5.178.215:23
53.###.133.213:23
15#.##7.192.152:23
14#.#6.0.243:23
19#.##8.12.14:23
16#.##9.74.151:23
90.##.45.144:23
18#.##.171.130:23
15#.##4.96.86:23
16#.#2.55.86:23
20#.##.221.171:23
19#.##.113.34:23
10#.#2.8.188:23
21#.##4.26.189:23
12#.##2.102.184:23
18#.##6.254.35:23
57.##.244.186:23
19#.##.46.157:23
21#.##0.153.51:23
53.###.10.161:23
16#.##1.72.155:23
4.##.161.49:23
10#.#9.15.63:23
11#.##0.167.116:23
13#.##.43.193:23
10#.#.114.220:23
47.###.26.198:23
13#.##5.121.129:23
14#.##.43.131:23
17#.##.91.132:23
16#.##.227.52:23
31.##9.5.144:23
38.##.148.119:23
24.###.104.186:23
21#.##.194.125:23
11#.##2.157.48:23
14#.##6.165.158:23
11#.##9.220.112:23
18#.##.210.102:23
18#.##8.252.110:23
15#.##5.72.83:23
21#.##4.173.44:23
14#.##9.184.189:23
44.###.246.126:23
96.##.55.76:23
37.##.229.14:23
20#.##9.137.193:23
14#.##3.212.112:23
12#.#5.0.105:23
19#.##.223.227:23
16#.#7.96.25:23
18#.##6.133.167:23
17#.##.219.58:23
11#.##.245.174:23
37.##6.48.97:23
11#.##.13.244:23
20.##.198.0:23
20#.##8.245.17:23
18#.##3.251.73:23
10#.##7.132.117:23
17#.#0.3.6:23
39.##.46.140:23
22#.##.200.92:23
93.##0.36.30:23
19#.##0.151.18:23
13#.#.207.175:23
82.###.118.66:23
72.##5.66.79:23
16#.##.166.109:23
17#.##7.76.195:23
11#.##.233.236:23
12#.##4.28.27:23
80.###.196.242:23
4.###.49.126:23
14#.##9.3.186:23
27.###.159.169:23
20#.##9.126.122:23
15#.##3.144.52:23
16#.##3.184.239:23
11#.##3.121.226:23
44.##4.30.63:23
60.###.183.55:23
21#.##9.162.239:23
14#.##8.85.144:23
15#.##7.77.193:23
17#.##4.219.198:23
16#.##3.30.60:23
20#.##2.174.254:23
63.###.78.179:23
13#.##.116.94:23
57.##1.27.80:23
10#.#6.89.42:23
61.##.54.47:23
11#.##7.45.174:23
61.##0.96.59:23
18#.##0.253.70:23
79.##.88.104:23
74.##2.7.33:23
22#.##1.239.59:23
24.###.18.184:23
13#.##4.209.255:23
42.###.149.195:23
18#.##.173.46:23
18#.##.157.160:23
62.###.112.41:23
15#.##.81.193:23
13#.##.67.225:23
82.##.113.230:23
97.##.120.184:23
11#.##0.240.229:23
62.###.136.112:23
43.###.66.185:23
11#.##.28.110:23
16#.##1.79.221:23
87.###.214.189:23
19#.##.191.255:23
91.###.88.102:23
18#.##9.41.64:23
19.###.50.205:23
17#.##9.251.241:23
11#.##.205.211:23
17#.#.58.228:23
12#.##5.202.39:23
18#.##2.87.205:23
18#.##.33.178:23
25.##.162.64:23
15#.##.144.168:23
62.##.186.75:23
15#.##9.77.71:23
48.##.20.32:23
58.##.89.152:23
13#.##2.143.35:23
11#.##3.139.100:23
32.###.238.53:23
18#.#1.85.24:23
65.##6.74.67:23
10#.##2.43.11:23
18#.##4.105.201:23
91.##.157.74:23
18.##7.92.88:23
16#.##1.255.184:23
13#.#9.178.9:23
97.###.224.247:23
15#.##0.119.25:23
11#.##1.9.120:23
20#.##8.82.107:23
9.###.58.97:23
22#.##1.28.100:23
12#.##.163.26:23
35.##0.97.56:23
18.###.248.226:23
14#.##1.33.189:23
18.###.97.125:23

Other:

Reads information from /proc/kallsyms

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations