Техническая информация
Вредоносные функции:
Запускает себя в качестве демона
Подменяет имя приложения на:
- 3n6MtskswgUg8DoI
Завершает системные процессы:
- sshd
Завершает следующие процессы:
- exim4
- bash
- run.sh
Сетевая активность:
Ожидает входящих соединений на портах:
- 0.0.0.0:23
Устанавливает соединение:
- 8.#.8.8:53
- 50.###.165.109:421
- 25#.##5.255.255:421
Проводит атаку перебором по словарю (брутфорс) по протоколу Telnet.
Посылает данные следующим серверам:
- 15#.##2.254.132:23
- 17#.##.53.106:23
- 13#.##0.247.48:23
- 14#.##.155.213:23
- 16#.##3.146.170:23
- 89.###.133.249:23
- 27.###.224.145:23
- 17#.##9.241.220:23
- 71.##.243.199:23
- 40.##6.12.99:23
- 20#.##5.2.158:23
- 72.###.113.255:23
- 17#.##9.94.19:23
- 21#.##5.55.117:23
- 82.##.50.0:23
- 13#.##5.126.153:23
- 18#.##3.127.88:23
- 13#.##9.215.184:23
- 17#.##.178.224:23
- 40.##.144.145:23
- 13#.#.215.1:23
- 84.###.107.72:23
- 10#.##.204.147:23
- 36.##.63.99:23
- 16#.##0.7.184:23
- 15#.##5.186.228:23
- 18#.##4.35.39:23
- 46.###.121.11:23
- 20#.##.227.18:23
- 13#.##6.251.139:23
- 36.###.135.109:23
- 79.##.193.180:23
- 18#.##.222.139:23
- 17#.##0.233.244:23
- 17.##.44.74:23
- 17#.##.134.206:23
- 14#.##.161.34:23
- 15#.##3.117.55:23
- 34.###.86.252:23
- 53.##.124.63:23
- 42.###.237.193:23
- 11#.##8.34.37:23
- 12#.##.210.196:23
- 53.###.94.130:23
- 17#.##5.42.122:23
- 20#.##9.121.193:23
- 17#.##0.112.173:23
- 19#.##.96.154:23
- 18#.##0.119.244:23
- 65.###.24.237:23
- 47.###.236.83:23
- 27.##.57.231:23
- 14#.##5.227.10:23
- 15#.##3.23.126:23
- 95.##5.248.0:23
- 59.###.233.231:23
- 21#.##.240.241:23
- 72.###.27.202:23
- 39.##1.10.6:23
- 14#.##.19.127:23
- 61.###.195.198:23
- 85.##.215.162:23
- 53.###.210.136:23
- 11#.#8.6.190:23
- 10#.##.225.83:23
- 22#.##2.253.63:23
- 72.##.149.255:23
- 16#.##9.175.36:23
- 11#.##0.186.124:23
- 13#.##6.240.119:23
- 94.##.173.18:23
- 13#.##7.11.79:23
- 15#.##3.89.46:23
- 14#.##.115.162:23
- 42.###.21.148:23
- 18#.#.110.253:23
- 87.##6.12.58:23
- 38.##.168.43:23
- 17#.##.198.11:23
- 17#.##.165.176:23
- 18#.#.241.213:23
- 13.##.87.35:23
- 21#.##.186.66:23
- 13#.##.182.206:23
- 22#.##1.119.25:23
- 18#.##.233.101:23
- 17#.##.129.203:23
- 18#.#3.10.0:23
- 13#.##.134.124:23
- 11#.##8.166.81:23
- 12#.##6.151.124:23
- 68.##.121.169:23
- 62.###.125.11:23
- 80.##.80.114:23
- 11#.##9.232.129:23
- 1.###.135.125:23
- 21#.##6.61.155:23
- 97.###.99.190:23
- 10#.##.80.225:23
- 8.##.178.244:23
- 10#.##1.66.219:23
- 68.##1.9.17:23
- 17#.##6.125.150:23
- 23.##.213.27:23
- 16#.##3.101.113:23
- 15#.#8.93.65:23
- 18#.##.198.80:23
- 58.##.101.179:23
- 14#.##.204.152:23
- 12#.##.125.61:23
- 17#.##8.83.146:23
- 14#.##4.207.112:23
- 13#.##8.249.222:23
- 18#.##.201.85:23
- 75.###.229.128:23
- 17#.##0.110.9:23
- 15#.##2.68.116:23
- 14.###.98.181:23
- 21#.##4.243.74:23
- 18#.##1.233.11:23
- 12#.##.97.177:23
- 11#.##5.91.214:23
- 17#.##4.106.76:23
- 43.###.179.198:23
- 11#.##.177.120:23
- 16#.#7.74.43:23
- 40.###.38.110:23
- 12#.##6.253.47:23
- 85.##1.18.10:23
- 41.##0.80.20:23
- 13#.##7.241.231:23
- 79.###.128.115:23
- 16#.##9.65.21:23
- 17.##0.36.53:23
- 82.###.200.44:23
- 4.##.38.57:23
- 22#.##.249.72:23
- 14#.#1.79.87:23
- 22#.##5.158.82:23
- 20.##.196.3:23
- 18#.##4.156.57:23
- 67.###.86.230:23
- 16#.##.197.104:23
- 61.##.67.18:23
- 21#.#9.4.8:23
- 16#.##5.255.197:23
- 27.###.64.231:23
- 15#.##9.178.13:23
- 32.###.85.127:23
- 2.###.105.32:23
- 10#.##7.122.12:23
- 10#.##.129.219:23
- 21#.##7.2.233:23
- 10#.##.90.200:23
- 60.###.216.112:23
- 80.##.132.38:23
- 22#.##3.127.165:23
- 44.###.60.132:23
- 20#.##0.35.237:23
- 18#.##.82.133:23
- 19#.##4.154.153:23
- 14#.##4.112.225:23
- 21#.##.174.143:23
- 15#.##.166.11:23
- 20.##8.14.80:23
- 15#.##.106.172:23
- 20#.#7.25.61:23
- 76.###.61.202:23
- 19#.#3.92.74:23
- 41.###.105.178:23
- 79.###.111.90:23
- 45.###.245.112:23
- 10#.#.192.141:23
- 16.##.133.21:23
- 14#.##.181.104:23
- 19#.##.33.250:23
- 22#.##4.244.195:23
- 16.###.223.42:23
- 12#.##6.54.213:23
- 20#.##7.202.109:23
- 34.###.117.32:23
- 14#.##0.165.58:23
- 20#.##.202.107:23
- 10#.##2.213.160:23
- 11#.#.179.254:23
- 15#.#0.69.71:23
- 81.##.133.83:23
- 11#.##9.200.89:23
- 57.##.66.211:23
- 16#.##6.117.197:23
- 80.##0.69.63:23
- 18#.#3.35.72:23
- 12#.#.83.217:23
- 69.###.117.191:23
- 39.###.16.158:23
- 20.###.247.210:23
- 12#.##0.15.40:23
- 53.###.94.228:23
- 54.##.177.101:23
- 17#.##.210.221:23
- 11#.##7.90.24:23
- 15#.##.139.156:23
- 19#.##6.39.156:23
- 15#.##.218.22:23
- 16#.##0.181.54:23
- 60.##.76.107:23
- 24.###.83.191:23
- 11#.##1.211.41:23
- 15#.#.106.79:23
- 20#.##.74.103:23
- 38.###.114.218:23
- 20#.##0.217.144:23
- 18.###.150.98:23
- 21#.##0.184.186:23
- 14#.##8.124.158:23
- 12#.##0.166.216:23
- 64.###.84.209:23
- 5.##.4.250:23
- 76.##.210.186:23
- 93.###.253.200:23
- 13#.##.86.101:23
- 70.###.63.212:23
- 96.##.70.19:23
- 21#.##7.36.98:23
- 95.###.217.11:23
- 13#.##5.116.213:23
- 17#.#0.5.65:23
- 83.###.215.114:23
- 42.###.109.72:23
- 19#.#.25.125:23
- 9.###.240.90:23
- 4.###.33.73:23
- 69.###.178.161:23
- 12#.##.253.144:23
- 12#.##6.98.218:23
- 13#.#2.75.60:23
- 11#.##4.246.45:23
- 15#.#.202.167:23
- 14#.##8.55.159:23
- 16#.##.64.255:23
- 10#.##6.232.31:23
- 42.##.139.87:23
- 68.###.195.235:23
- 95.##.2.150:23
- 11#.##.150.92:23
- 10#.##9.109.42:23
- 59.##.163.245:23
- 22#.##0.230.92:23
- 17#.##1.155.107:23
- 15#.#2.7.176:23
- 69.###.139.162:23
- 12#.#0.124.1:23
- 41.###.17.166:23
- 82.###.137.228:23
- 17.###.243.189:23
- 13#.#9.4.172:23
- 39.###.132.68:23
- 21#.#.245.79:23
- 20#.##.60.171:23
- 20#.##0.0.158:23
- 10#.##.155.197:23
- 12#.##7.41.66:23
- 53.###.87.241:23
- 11#.##2.28.115:23
- 13#.#.43.7:23
- 21#.##1.45.44:23
- 32.###.17.176:23
- 61.###.143.103:23
- 10#.##8.178.187:23
- 18#.##3.236.244:23
- 99.###.147.36:23
- 99.###.85.237:23
- 13#.#9.106.5:23
- 22#.##9.215.201:23
- 44.##.38.123:23
- 17#.#1.68.97:23
- 14#.##.236.128:23
- 13#.##.251.45:23
- 64.###.228.122:23
- 13#.##.233.166:23
- 15#.##7.141.79:23
- 2.###.94.97:23
- 20#.##7.160.43:23
- 86.##.71.95:23
- 36.##1.15.96:23
- 18.###.95.207:23
- 32.##.244.86:23
- 22#.##.244.36:23
- 13#.##5.178.98:23
- 84.###.254.110:23
- 19#.##4.186.100:23
- 2.###.51.81:23
- 92.###.116.247:23
- 61.##.226.69:23
- 21#.##4.114.8:23
- 31.###.122.17:23
- 15#.##1.43.39:23
- 1.##.98.165:23
- 14#.#.182.110:23
- 2.##.21.228:23
- 94.###.235.128:23
- 85.###.12.120:23
- 20#.#8.40.47:23
- 19#.##8.51.42:23
- 20#.##0.74.28:23
- 8.###.235.173:23
- 10#.##9.221.223:23
- 12#.##2.4.116:23
- 75.###.198.135:23
- 86.##3.28.27:23
- 10#.##0.16.175:23
- 10#.##3.171.202:23
- 37.##.38.188:23
- 15#.##.90.247:23
- 19.##.106.75:23
- 11#.##7.149.208:23
- 74.##.149.85:23
- 14#.##2.80.207:23
- 13#.##.106.158:23
- 21#.##.99.164:23
- 43.###.201.165:23
- 18#.##6.82.254:23
- 80.###.240.173:23
- 77.###.66.234:23
- 39.##.39.158:23
- 19#.##6.56.204:23
- 93.###.10.135:23
- 11#.##.217.159:23
- 10#.##5.209.203:23
- 44.##9.3.165:23
- 15#.##3.251.1:23
- 11#.##4.152.142:23
- 97.##.47.61:23
- 57.###.214.30:23
- 17#.##7.50.91:23
- 16#.##.181.221:23
- 19#.#.158.130:23
- 64.###.166.189:23
- 12#.##4.232.125:23
- 41.##.35.252:23
- 4.###.38.219:23
- 18#.##6.167.231:23
- 97.###.123.208:23
- 16#.##.62.195:23
- 60.##.85.170:23
- 13#.##.228.172:23
- 48.##6.24.69:23
- 10#.##.176.27:23
- 17#.##1.81.207:23
- 21#.##3.84.63:23
- 44.###.132.34:23
- 16#.#9.1.50:23
- 91.##.224.7:23
- 21#.##.155.139:23
- 17#.##.207.89:23
- 14#.##4.142.243:23
- 18#.#1.8.152:23
- 15#.#5.55.59:23
- 10#.#.108.171:23
- 19#.##1.83.137:23
- 16#.##3.132.94:23
- 19.##9.29.74:23
- 18#.##6.117.217:23
- 9.###.76.223:23
- 2.###.28.224:23
- 16#.##5.178.99:23
- 11#.##.123.62:23
- 63.###.106.165:23
- 16#.#.212.218:23
- 20#.##.148.12:23
- 65.##.141.222:23
- 13#.##.131.187:23
- 17#.##3.154.244:23
- 14#.##.213.190:23
- 14#.##.143.153:23
- 14#.#.69.217:23
- 12.##.51.96:23
- 16#.##3.243.12:23
- 66.##.250.54:23
- 93.##.201.71:23
- 45.##.240.160:23
- 14#.#2.3.211:23
- 17#.#.28.148:23
- 16#.#3.76.60:23
- 66.###.25.241:23
- 76.###.25.174:23
- 17#.##6.246.198:23
- 11#.##.127.252:23
- 18#.##1.106.43:23
- 53.###.105.228:23
- 93.##.214.46:23
- 90.###.119.83:23
- 93.###.222.245:23
- 99.###.255.104:23
- 20#.##.17.110:23
- 12#.##3.211.251:23
- 11#.##6.58.131:23
- 94.###.218.65:23
- 58.###.152.109:23
- 16#.##2.140.106:23
- 1.##.136.247:23
- 12#.##0.138.71:23
- 13#.##6.146.248:23
- 4.##.116.217:23
- 16#.#1.65.93:23
- 19#.##8.209.148:23
- 75.###.235.146:23
- 21#.#.98.17:23
- 20#.##.91.165:23
- 15#.##5.161.0:23
- 69.##.109.15:23
- 12#.##7.132.32:23
- 10#.##0.128.91:23
- 16#.##7.34.210:23
- 16#.##6.24.37:23
- 18#.##.193.95:23
