Linux.Siggen.7102

Technical Information

Malicious functions:

Removes itself

Launches itself as a daemon

Substitutes application name for:

25upes5qj4w0l842t7dv

Performs process tracing:

swapper/0

Kills the following processes:

run.sh
bash
25upes5qj4w0l84

Network activity:

Awaits incoming connections on ports:

127.0.0.1:8345

Establishes connection:

8.#.8.8:53
1.#.0.1:53
21#.##.149.10:35342

DNS ASK:

re####h-network.su

Sends data to the following servers:

19#.###.244.183:37215
41.###.54.100:37215
15#.###.29.182:37215
72.##.220.67:37215
15#.##.64.41:37215
41.##.70.114:37215
15#.###.214.158:37215
19#.##.20.232:37215
42.###.243.182:37215
15#.###.247.179:37215
41.##.122.114:37215
15#.##.45.204:37215
83.##.76.108:37215
41.###.178.61:37215
14#.##.220.229:37215
15#.##.5.96:37215
18#.##.208.194:37215
49.###.226.183:37215
41.###.121.244:37215
15#.###.186.52:37215
41.###.168.236:37215
41.##.209.119:37215
15#.##.184.9:37215
41.##.41.228:37215
94.###.145.220:37215
16#.###.201.194:37215
15#.##1.21.79:37215
16#.###.156.66:37215
41.###.39.59:37215
17#.##0.41.6:37215
41.##.199.146:37215
41.###.171.65:37215
41.###.16.230:37215
41.##.203.153:37215
16#.##.251.88:37215
10#.###.221.217:37215
19#.###.13.157:37215
15#.###.231.135:37215
19#.###.169.150:37215
41.###.226.1:37215
41.##.2.137:37215
10#.##.1.197:37215
19#.###.172.92:37215
63.###.40.182:37215
15#.###.146.209:37215
41.##.154.118:37215
41.###.5.37:37215
15#.##3.7.69:37215
54.##.22.181:37215
15#.###.104.129:37215
41.##.120.251:37215
15#.##.103.245:37215
15#.###.162.171:37215
41.##.102.206:37215
41.##.193.230:37215
19#.##.173.50:37215
19#.###.226.212:37215
19#.##.111.252:37215
19#.###.249.18:37215
15#.##.57.236:37215
41.###.131.141:37215
34.###.14.111:37215
41.##.255.37:37215
93.#.#09.191:37215
60.##.53.128:37215
19#.###.86.174:37215
15#.#.109.245:37215
41.###.4.126:37215
15#.##.180.236:37215
15#.##.20.243:37215
15#.##2.20.81:37215
15#.##.149.65:37215
41.###.245.13:37215
19#.##.92.119:37215
41.###.187.76:37215
15#.##.151.98:37215
15#.###.119.63:37215
19#.###.182.20:37215
41.###.102.248:37215
19#.###.236.80:37215
4.##.#71.65:37215
15#.##.120.13:37215
19#.###.80.220:37215
13#.##.237.145:37215
22#.##.176.94:37215
15#.###.181.241:37215
19#.##7.38.15:37215
19#.###.99.196:37215
41.##.194.1:37215
41.###.60.49:37215
19#.##8.29.91:37215
21#.##.247.218:37215
19#.###.235.93:37215
12#.###.214.157:37215
66.###.13.8:37215
19#.##.181.14:37215
19#.###.232.220:37215
21#.###.239.151:37215
19#.##3.64.29:37215
15#.##1.9.48:37215
19#.##.181.162:37215
15#.#.241.16:37215
19#.###.27.201:37215
41.##.13.25:37215
41.###.25.127:37215
36.##.22.158:37215
12.###.132.213:37215
19#.##.116.186:37215
19#.##4.4.99:37215
15#.###.92.103:37215
15#.###.67.148:37215
18#.##.224.175:37215
15#.##.50.222:37215
19#.###.140.168:37215
41.##.157.142:37215
19#.##5.5.156:37215
70.###.100.49:37215
41.###.238.142:37215
41.###.80.89:37215
88.#.#49.77:37215
41.###.247.81:37215
41.###.17.25:37215
79.###.244.139:37215
41.###.64.243:37215
41.###.115.157:37215
19#.##6.42.57:37215
41.###.251.125:37215
15#.##8.39.55:37215
41.###.224.29:37215
41.###.32.249:37215
15#.###.217.237:37215
19#.##.176.6:37215
41.##.82.135:37215
19#.##.207.59:37215
15#.###.176.217:37215
15#.##.37.37:37215
41.###.55.204:37215
15#.###.254.229:37215
41.###.114.117:37215
18#.###.161.186:37215
17#.##2.19.7:37215
19#.##.56.227:37215
13.##.232.162:37215
41.###.237.141:37215
19#.###.147.54:37215
41.##.54.164:37215
19#.##.207.90:37215
71.###.61.97:37215
15#.###.85.207:37215
41.##.212.121:37215
19#.##.138.160:37215
41.##.165.147:37215
41.###.129.113:37215
41.###.11.76:37215
19#.###.134.46:37215
19#.###.183.16:37215
99.###.57.149:37215
41.###.97.149:37215
15#.##4.7.245:37215
69.###.199.252:37215
14#.###.116.46:37215
15#.###.67.204:37215
15#.###.199.206:37215
41.##.191.107:37215
82.##.84.193:37215
19#.###.238.114:37215
41.###.103.120:37215
19#.###.120.231:37215
41.###.245.56:37215
19#.###.36.181:37215
19#.##.108.68:37215
19#.###.54.167:37215
15#.###.67.125:37215
16#.###.72.155:37215
19#.###.191.223:37215
19#.##.68.77:37215
41.###.82.181:37215
15#.###.117.173:37215
13.#.#9.236:37215
85.##.255.236:37215
19#.###.243.122:37215
15#.#.126.181:37215
19#.##.140.253:37215
19#.##.29.226:37215
58.###.90.65:37215
41.##.136.219:37215
19#.##1.5.196:37215
19#.###.83.170:37215
13#.#.66.191:37215
15#.##.192.53:37215
15#.##2.15.24:37215
19#.###.44.182:37215
41.###.29.224:37215
15#.###.206.36:37215
16#.##.77.247:37215
13.##.8.193:37215
41.###.124.162:37215
15#.##.111.96:37215
19#.##.239.168:37215
15#.###.100.161:37215
41.###.61.51:37215
41.##.143.82:37215
15#.###.188.83:37215
15#.##.119.145:37215
18#.##.165.199:37215
19#.##.99.142:37215
15#.###.150.236:37215
19#.##0.9.93:37215
14#.##3.67.81:37215
19#.###.218.107:37215
15#.###.98.208:37215
15#.###.180.225:37215
41.###.180.121:37215
19#.##9.16.47:37215
15#.###.123.25:37215
41.###.196.218:37215
19#.##3.99.53:37215
87.###.223.137:37215
41.##.236.231:37215
15#.###.169.118:37215
41.###.179.81:37215
15#.##.12.62:37215
19#.##.112.11:37215
15#.#.123.147:37215
11#.##0.83.17:37215
19#.##.49.7:37215
41.###.194.161:37215
19#.###.132.250:37215
41.##.144.245:37215
15#.##.72.79:37215
15#.###.116.37:37215
41.##.254.72:37215
19#.##.229.229:37215
41.###.38.3:37215
19#.###.12.113:37215
44.##.54.26:37215
19#.##.39.79:37215
19#.###.245.158:37215
41.###.107.83:37215
21#.###.116.143:37215
19#.##8.88.30:37215
19#.##.195.36:37215
21#.##7.9.134:37215
63.##.141.15:37215
19#.##.16.5:37215
19#.###.26.141:37215
41.###.74.68:37215
15#.##5.36.30:37215
15#.###.222.116:37215
12#.###.246.77:37215
19#.###.70.155:37215
15#.##5.28.35:37215
19#.###.217.109:37215
15#.###.151.217:37215
19#.###.218.135:37215
41.###.142.3:37215
41.###.5.160:37215
19#.###.156.250:37215
41.###.168.177:37215
15#.###.49.194:37215
15#.##.66.212:37215
41.###.124.136:37215
18#.##.11.22:37215
70.###.100.158:37215
15#.##8.41.59:37215
19#.###.33.212:37215
15#.##.46.133:37215
27.###.225.162:37215
19#.##.239.81:37215
19#.###.116.17:37215
19#.##.204.91:37215
18.###.27.149:37215
41.###.120.181:37215
21#.##.44.175:37215
15#.##.71.207:37215
93.###.228.71:37215
10#.##.146.35:37215
21#.###.48.126:37215
41.###.108.189:37215
14#.##.41.159:37215
12#.###.115.124:37215
15#.##.89.229:37215
41.##.216.246:37215
13#.###.15.195:37215
41.###.66.56:37215
41.##.188.242:37215
21#.###.175.69:37215
15#.##7.4.59:37215
41.###.68.70:37215
15#.###.254.37:37215
14#.##.57.240:37215
50.###.14.188:37215
15#.#.244.5:37215
19#.###.206.89:37215
19#.##.37.70:37215
21#.##.184.38:37215
41.##.248.100:37215
41.###.137.52:37215
19#.###.71.114:37215
78.##.50.127:37215
15#.###.136.248:37215
41.###.28.250:37215
15#.##.118.164:37215
19#.##.175.96:37215
19#.##.166.137:37215
83.##.0.34:37215
19#.###.139.149:37215
15#.###.102.52:37215
15#.##.255.167:37215
19#.##.100.200:37215
15#.##.78.225:37215
41.##.131.55:37215
11#.#.202.74:37215
19#.###.37.157:37215
15#.##.215.41:37215
19#.##3.66.93:37215
5.###.151.136:37215
19#.##.223.244:37215
19#.###.121.66:37215
19#.###.160.159:37215
41.#.#5.70:37215
41.##.56.181:37215
11#.##.5.38:37215
94.###.47.80:37215
19#.##.54.125:37215
19#.###.235.67:37215
15#.##3.8.98:37215
19#.##.163.246:37215
36.###.30.126:37215
19#.###.42.126:37215
41.##.73.68:37215
19#.###.19.229:37215
41.###.162.243:37215
19#.##1.50.5:37215
19#.###.175.172:37215
39.##.217.169:37215
19#.###.189.160:37215
92.###.232.33:37215
15#.##.20.189:37215
15#.##.23.221:37215
15#.###.128.226:37215
41.##.105.6:37215
15#.###.115.38:37215
40.##.36.135:37215
19#.###.167.115:37215
19#.##.181.43:37215
19#.###.206.79:37215
41.###.106.58:37215
11#.###.150.85:37215
20#.##.181.6:37215
58.#.#13.35:37215
18#.###.18.208:37215
19#.##.179.62:37215
15#.###.200.191:37215
41.###.28.7:37215
19#.##.113.45:37215
19#.###.185.113:37215
15#.###.51.186:37215
19#.###.146.44:37215
15#.#.91.144:37215
41.##.80.88:37215
13#.##.236.12:37215
19#.###.156.65:37215
15#.###.103.145:37215
19#.##7.37.10:37215
18.#.#14.93:37215
15#.##6.11.82:37215
41.##.84.151:37215
41.###.80.74:37215
41.##.240.59:37215
41.###.144.18:37215
19#.##.99.25:37215
15#.##3.54.0:37215
13.###.248.213:37215
15#.##2.13.13:37215
41.##.38.221:37215
41.###.117.183:37215
19#.##.233.240:37215
41.#.#34.234:37215
15#.###.89.238:37215
45.##.131.220:37215
15#.###.34.241:37215
19#.##.85.136:37215
15#.##.94.94:37215
66.###.125.156:37215
15#.###.154.145:37215
41.###.136.134:37215
41.###.153.144:37215
62.###.170.0:37215
14#.###.120.10:37215
15#.#.109.71:37215
41.##.56.159:37215
19#.###.139.134:37215
15#.##.202.60:37215
19#.###.89.118:37215
15#.###.177.120:37215
15#.###.228.45:37215
41.###.10.223:37215
15#.##.252.50:37215
41.###.14.87:37215
19#.###.243.240:37215
19#.##8.157.3:37215
17#.###.139.66:37215
15#.##.115.0:37215
41.##.145.229:37215
19#.##.72.251:37215
41.###.96.162:37215
16#.##.160.53:37215
15#.###.51.115:37215
15#.##.91.92:37215
15#.###.171.44:37215
19#.###.236.51:37215
41.###.55.165:37215
15#.##.131.16:37215
18#.###.106.129:37215
15#.###.233.101:37215
46.##.172.133:37215
15#.##.82.59:37215
19#.###.171.103:37215
63.###.139.226:37215
41.###.238.76:37215
19#.###.164.71:37215
15#.##.18.226:37215
15#.###.253.177:37215
19#.##.39.84:37215
91.###.154.203:37215
41.##.86.99:37215
41.###.120.100:37215
41.###.160.234:37215
12#.###.143.215:37215
19#.#.35.230:37215
10#.##.31.39:37215
19#.###.68.115:37215
41.##.37.123:37215
38.###.148.86:37215
41.###.172.192:37215
12#.###.193.18:37215
41.##.238.175:37215
19#.##.89.24:37215
15#.##.83.48:37215
19#.##3.1.172:37215
15#.##.112.195:37215
15#.##.198.161:37215
19#.##5.203.7:37215
41.##.3.29:37215
15#.###.104.33:37215
41.###.254.164:37215
11#.###.50.140:37215
19#.#.19.13:37215
15#.##.161.252:37215
41.###.93.100:37215
41.##.241.34:37215
15#.###.17.177:37215
13#.##.169.92:37215
15#.##.238.54:37215
41.###.108.208:37215
15#.##.86.115:37215
15#.###.221.64:37215
15#.##.148.87:37215
19#.###.113.236:37215
14#.##.204.108:37215
15#.###.201.114:37215
15#.###.12.236:37215
41.##.247.241:37215
10#.##8.58.18:37215
41.###.167.30:37215
19#.##.213.127:37215
19#.##.213.81:37215
15#.##.4.109:37215
15#.##.13.128:37215
19#.###.122.39:37215
15#.##.166.105:37215
19#.###.209.10:37215
17#.##.218.65:37215
15#.##3.255.0:37215
21#.###.109.243:37215
19#.###.146.94:37215
15#.##.118.223:37215
15#.###.225.112:37215
15#.##.13.155:37215
15#.###.195.112:37215
88.#.#7.67:37215
15#.##.240.140:37215
41.###.178.142:37215
41.###.198.81:37215
15#.###.13.140:37215
15#.##.51.173:37215
23.###.142.62:37215
53.##.207.104:37215
27.###.81.99:37215
15#.###.173.103:37215
77.###.183.23:37215
16#.#.31.173:37215
19#.#.89.27:37215
19#.###.105.129:37215
41.##.98.17:37215
15#.##.211.44:37215
15#.###.211.160:37215
10#.##2.16.81:37215
19#.#.190.61:37215
15#.###.20.166:37215
19#.###.197.17:37215
27.###.153.5:37215
19#.##.182.185:37215
15#.##.107.7:37215
19#.##.162.189:37215
41.###.190.163:37215
41.###.255.125:37215
15#.##7.10.71:37215
15#.###.194.59:37215
15#.###.126.37:37215
41.###.188.5:37215
41.###.19.192:37215
15#.##6.136.6:37215
19#.###.126.248:37215
15#.##.66.232:37215
19#.###.161.110:37215
41.##.28.241:37215
19#.###.210.114:37215
19#.##.204.81:37215
18#.###.205.67:37215
19#.###.103.122:37215
20#.##.42.25:37215
41.##.75.145:37215
41.###.140.131:37215
41.###.113.21:37215
41.###.1.17:37215
41.##.11.196:37215
98.##.34.46:37215
21#.##7.2.175:37215
21#.###.146.121:37215
19#.##.102.17:37215
41.###.253.88:37215
18#.###.59.194:37215
15#.###.135.114:37215
19#.##.148.131:37215
41.###.55.124:37215
19#.##.165.10:37215
41.###.110.54:37215
41.##.39.142:37215
15#.###.107.251:37215
41.##.178.151:37215
41.###.46.99:37215
19#.###.168.246:37215
41.###.67.35:37215
41.###.34.175:37215
19#.##.99.155:37215
15#.##.187.132:37215
19#.##.34.62:37215
19#.##.231.231:37215
19#.###.12.247:37215
41.###.53.203:37215
20#.##.87.203:37215
22#.##.126.143:37215
15#.##.193.215:37215
21#.##.149.10:35342

Receives data from the following servers:

21#.##.149.10:35342

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations