Linux.Siggen.6533

Техническая информация

Вредоносные функции:

Запускает себя в качестве демона

Подменяет имя приложения на:

aaaaaaaaaaaa
a

Запускает процессы:

/usr/sbin/xtables-nft-multi iptables -A INPUT -p tcp --destination-port 23 -j DROP
/bin/sh -c echo Uh Oh seems like the new malware on the block has infected you... BTW Fortnite Is Fucking Shit. >> /home/vBot_Infected.txt
/bin/sh -c echo Uh Oh seems like the new malware on the block has infected you... BTW Fortnite Is Fucking Shit. >> /root/vBot_Infected.txt
/bin/sh -c killall -r infn
/bin/sh -c killall -r fBot
/bin/sh -c iptables -A INPUT -p tcp --destination-port 23 -j DROP
/bin/sh -c killall -9 telnetd || kill -9 telnetd\x0a
/bin/sh -c killall -r infn.
/bin/sh -c echo Uh Oh seems like the new malware on the block has infected you... BTW Fortnite Is Fucking Shit. >> vBot_Infected.txt

Выполняет операции с файловой системой:

Создает или модифицирует файлы:

/root/vBot_Infected.txt
/home/vBot_Infected.txt

Сетевая активность:

Ожидает входящих соединений на портах:

127.0.0.1:38527
0.0.0.0:23

Устанавливает соединение:

8.#.8.8:53
85.###.34.70:9110

Проводит атаку перебором по словарю (брутфорс) по протоколу Telnet.

DNS ASK:

z.###net.rocks

Посылает данные следующим серверам:

85.###.34.70:9110
20#.##.65.74:2323
8.###.144.160:2323
11#.##6.99.79:2323
16#.##9.223.37:2323
12#.###.182.166:2323
71.###.222.127:2323
14#.##.207.129:2323
1.##.#24.176:2323
83.###.208.39:2323
95.###.55.39:2323
14#.##.253.222:2323
25#.###.238.161:2323
12#.##.177.137:2323
68.##.219.15:2323
16#.##0.191.62:2323
43.###.140.101:2323
96.###.131.218:2323
20#.##3.244.95:2323
25#.###.184.222:2323
24#.##1.155.10:2323
5.###.199.247:2323
23.###.251.212:2323
5.##.#29.227:2323
66.###.192.19:2323
78.##.40.148:2323
19#.##.208.112:2323
68.#.#53.172:2323
70.###.179.33:2323
25#.##.192.61:2323
91.###.3.107:2323
3.#.##1.124:2323
9.###.28.119:2323
16#.##7.35.189:2323
18#.##.41.96:2323
45.###.173.225:2323
16#.##6.137.60:2323
62.##.91.39:2323
19#.##.21.61:2323
52.##.75.149:2323
19#.###.244.123:2323
18#.##.188.141:2323
14#.##.33.234:2323
19#.###.153.148:2323
23#.##.246.144:2323
14#.##5.24.37:2323
98.##.210.149:2323
51.##.153.241:2323
18#.##.88.229:2323
11#.###.238.240:2323
80.##.32.39:2323
19#.###.200.225:2323
17#.##9.226.56:2323
45.###.147.116:2323
36.#.#5.189:2323
11#.###.230.148:2323
13#.##5.66.247:2323
12#.##.61.88:2323
11#.##9.125.34:2323
86.###.204.68:2323
12#.##8.5.118:2323
37.###.224.127:2323
19#.##.37.89:2323
17#.##8.40.148:2323
40.###.103.154:2323
24#.##.223.248:2323
12#.##.139.42:2323
83.###.117.196:2323
27.###.97.236:2323
5.###.178.232:2323
19#.###.165.148:2323
15#.###.125.158:2323
19#.##.97.217:2323
22#.###.181.162:2323
23#.##.33.205:2323
18#.##.200.194:2323
18#.###.141.186:2323
19#.##.174.85:2323
11#.##.247.95:2323
19#.##9.210.48:2323
11#.##.146.9:2323
21#.###.186.245:2323
10#.##.213.20:2323
22#.##3.129.51:2323
72.###.213.149:2323
3.###.6.77:2323
23#.##6.186.73:2323
21#.##.107.205:2323
63.##.34.158:2323
11#.##.196.7:2323
10#.##.9.196:2323
16#.##6.71.35:2323
2.###.11.56:2323
9.###.180.225:2323
14#.###.160.199:2323
16#.##.10.221:2323
15#.##0.49.104:2323
19.##.111.194:2323
10#.##.112.112:2323
18#.#.251.104:2323
38.###.117.230:2323
11#.##.79.171:2323
20#.##2.4.206:2323
17#.##.230.250:2323
24.###.108.10:2323
86.###.82.24:2323
12#.###.226.156:2323
60.###.116.94:2323
13#.##3.57.56:2323
14#.##4.68.140:2323
19#.###.249.143:2323
24#.##.98.204:2323
72.###.220.211:2323
21#.##0.89.209:2323
3.###.237.120:2323
78.##.248.109:2323
39.###.124.15:2323
5.###.38.228:2323
23#.##.191.225:2323
36.###.127.7:2323
11#.##.246.135:2323
20.##.239.214:2323
19#.##.32.168:2323
16#.##3.90.157:2323
13#.##.94.80:2323
20#.##1.61.107:2323
16#.###.235.117:2323
91.###.161.167:2323
64.###.157.237:2323
59.###.237.153:2323
15#.##.123.195:2323
88.###.56.144:2323
23#.###.204.118:2323
50.##.151.180:2323
12.###.123.210:2323
38.###.95.118:2323
47.###.191.153:2323
94.###.53.60:2323
10#.##8.12.178:2323
15#.##6.22.46:2323
16.###.18.251:2323
12#.##.39.10:2323
27.###.123.189:2323
11#.##6.11.247:2323
44.##.90.207:2323
34.###.154.110:2323
27.###.139.230:2323
72.##.12.101:2323
66.##.241.151:2323
16#.##.151.246:2323
36.##.255.225:2323
12#.##.104.44:2323
13#.###.116.125:2323
13#.#.194.27:2323
16#.##4.81.135:2323
15#.##6.22.17:2323
96.###.243.131:2323
21#.##4.201.3:2323
24#.###.166.159:2323
85.###.27.29:2323
84.###.211.161:2323
22#.##.158.13:2323
19#.###.215.135:2323
37.###.18.187:2323
21#.###.176.199:2323
10#.##.122.127:2323
12#.##.28.139:2323
15#.##0.154.81:2323
15#.##.205.102:2323
9.##.#47.23:2323
22#.##4.86.10:2323
18#.##.73.118:2323
24#.##1.146.52:2323
23#.###.121.175:2323
16#.##0.113.81:2323
22#.##.193.133:2323
92.##.46.202:2323
20#.##.180.102:2323
8.##.#39.89:2323
52.###.77.176:2323
12#.##.33.126:2323
11#.##8.27.135:2323
48.##.115.67:2323
25#.#.131.101:2323
94.##.213.128:2323
61.###.127.114:2323
22#.###.183.113:2323
66.#.15.46:2323
15#.##0.51.185:2323
19#.##.167.162:2323
69.###.243.96:2323
70.##.129.184:2323
19#.#.195.220:2323
3.###.28.205:2323
98.##.246.109:2323
11#.##1.208.67:2323
15#.##.200.3:2323
19#.##9.75.31:2323
25#.##7.140.68:2323
13#.###.151.171:2323
34.###.71.155:2323
19#.##2.110.4:2323
94.##.56.112:2323
96.###.62.141:2323
61.###.111.27:2323
5.##.#64.60:2323
92.###.55.196:2323
60.###.68.48:2323
24#.##.203.182:2323
15#.##0.149.84:2323
13#.##.194.34:2323
15#.#.86.180:2323
15#.##4.95.37:2323
11#.##8.109.2:2323
15#.###.122.117:2323
17#.##6.107.39:2323
20#.##9.51.76:2323
24#.###.250.148:2323
35.###.112.6:2323
34.###.231.127:2323
20#.##.41.175:2323
52.###.211.155:2323
17#.##.237.128:2323
32.###.29.110:2323
20#.##5.97.239:2323
13#.##.9.234:2323
15#.##.62.79:2323
22#.##.96.224:2323
16#.##6.230.75:2323
12#.##.41.0:2323
25#.###.127.218:2323
21#.##.65.185:2323
24#.###.107.129:2323
18.###.61.156:2323
16.###.224.2:2323
15#.###.163.164:2323
21#.##.116.211:2323
13#.##.213.46:2323
39.##.0.251:2323
16#.##.202.145:2323
20#.##.123.181:2323
23#.###.190.152:2323
94.#.#09.215:2323
23#.##8.33.117:2323
20.##.124.97:2323
15#.##.230.129:2323
77.##.74.85:2323
16#.##1.83.44:2323
51.###.236.99:2323
23#.##4.242.37:2323
45.##.34.8:2323
17.##.27.246:2323
61.##.118.161:2323
11#.##0.246.45:2323
19#.##.162.25:2323
16#.##1.92.3:2323
23#.##2.139.22:2323
21#.##.113.116:2323
21#.##.114.67:2323
18.###.21.159:2323
16#.##.68.179:2323
74.###.238.46:2323
10#.###.198.201:2323
22#.##.244.246:2323
69.###.85.188:2323
90.###.61.79:2323
42.##.27.245:2323
17#.##.214.209:2323
14#.##3.138.91:2323
24#.##2.65.16:2323
25#.##2.141.28:2323
21#.##.72.95:2323
17#.###.159.227:2323
19#.##.221.46:2323
80.###.35.97:2323
87.###.2.58:2323
18#.###.115.204:2323
15#.##9.28.220:2323
22#.##.133.171:2323
17#.##.43.121:2323
24#.#.64.143:2323
10#.##.130.136:2323
12#.##8.226.25:2323
24#.###.219.229:2323
23#.##0.113.45:2323
21#.##5.67.119:2323
20#.##4.76.120:2323
25.###.195.42:2323
91.###.111.111:2323
21#.##.80.106:2323
18#.##0.1.69:2323
24#.##.201.74:2323
13#.##8.232.14:2323
5.##.#55.102:2323
24#.##.145.46:2323
22#.##6.128.88:2323
22#.##.240.229:2323
17#.###.148.191:2323
16#.##.152.165:2323
18#.##7.24.30:2323
12#.##7.141.82:2323
21#.##6.208.72:2323
87.###.128.121:2323
88.###.210.105:2323
42.###.196.29:2323
15#.###.110.250:2323
1.##.#6.152:2323
40.##.34.191:2323
24.##.139.127:2323
43.##.48.163:2323
14#.##.215.69:2323
13#.###.112.226:2323
13#.##8.77.232:2323
88.###.65.198:2323
21#.###.118.184:2323
25#.##6.104.10:2323
15#.##1.54.120:2323
17.###.135.23:2323
43.###.251.5:2323
12#.##0.151.66:2323
35.###.109.45:2323
24#.##4.72.22:2323
10#.##9.9.228:2323
11#.##.37.201:2323
46.###.208.227:2323
14#.##.30.117:2323
23#.##.152.3:2323
13#.##.122.96:2323
91.###.205.87:2323
17#.##.150.126:2323
66.##.18.220:2323
77.###.195.64:2323
58.###.172.96:2323
27.###.49.145:2323
24.###.109.44:2323
20#.###.131.180:2323
23#.##2.187.71:2323
13#.##.15.131:2323
17#.##.80.166:2323
23#.##2.91.167:2323
24#.##1.6.176:2323
18.###.187.205:2323
11#.##9.86.186:2323
25.###.38.207:2323
62.##.114.15:2323
19#.##.83.221:2323
15#.##.99.82:2323
19#.##.236.167:2323
17.###.224.156:2323
21#.##.118.138:2323
10#.##.133.134:2323
15#.##9.235.41:2323
14#.##.83.67:2323
10#.##8.30.56:2323
25#.##.30.22:2323
21#.##.42.164:2323
18#.##7.224.87:2323
13#.##.148.183:2323
80.###.128.255:2323
16.##.131.1:2323
57.##.49.70:2323
25#.###.240.249:2323
11#.##.108.139:2323
10#.###.254.213:2323
25#.##6.128.47:2323
47.##.93.56:2323
11#.##9.36.227:2323
16#.###.179.234:2323
16#.##3.185.43:2323
25#.##.65.146:2323
13#.###.231.108:2323
18#.###.225.103:2323
15#.###.181.106:2323
13#.###.196.117:2323
15#.##3.91.88:2323
19#.##2.90.182:2323
76.###.17.232:2323
17#.##.8.80:2323
12.##.89.218:2323
21#.##.81.76:2323
16#.##.132.251:2323
94.###.0.38:2323
13#.##6.12.58:2323
17#.##.201.199:2323
17#.#.120.129:2323
12#.##7.2.212:2323
17.##.142.169:2323
54.###.231.253:2323
31.###.6.151:2323
22#.##.114.1:2323
24#.###.109.127:2323
11#.##.114.15:2323
27.###.153.48:2323
67.###.223.85:2323
18#.##8.171.40:2323
21#.##5.70.220:2323
20#.##7.101.28:2323
23#.##.107.85:2323
21#.##1.129.62:2323
1.##.#36.93:2323
16#.##.174.229:2323
76.###.34.98:2323
19#.#.140.204:2323
60.##.42.210:2323
24#.###.164.142:2323
18#.##.200.130:23
51.#.38.86:23
17#.##3.249.41:2323
36.###.190.82:23
20#.##6.201.42:23
54.###.42.129:23
23#.##8.175.243:23
14#.#5.29.64:23
83.###.99.120:23
14#.##8.241.153:23
17#.##8.7.189:23
27.##.168.90:23
17#.###.247.147:2323
22#.##5.235.13:23
2.###.61.152:23
22#.##.146.148:23
25.###.229.30:23
15#.##.45.174:23
75.###.109.236:23
15#.##5.27.73:23
72.###.238.92:23
12#.#.147.97:23
11#.##.149.137:23
12#.##2.105.170:23
22#.##5.35.55:23
4.###.111.132:2323
24#.##3.98.158:23
12#.#28.3.2:23
23#.##8.10.157:23
35.##.80.214:23
18#.##6.15.216:23
58.##.46.45:23
14#.##4.54.201:23
99.##.84.42:23
12#.##.13.224:23
18#.##4.43.244:23
87.##.180.76:23
19.##.175.227:23
2.#.#7.207:23
63.###.26.73:2323
15#.##7.58.165:23
21#.#24.78.9:23
19#.##.146.253:23
11#.#63.45.9:23
15#.##8.168.126:23
15#.##.64.151:23
58.###.124.116:23
14#.#1.67.25:23
13#.##.35.28:2323
19#.##.208.16:23
27.##.34.104:23
20#.##1.183.147:23
22#.##9.80.196:23
12#.#4.79.41:23
72.##8.223.8:23
10#.##3.201.13:23
21#.##4.5.168:23
16#.##5.154.18:23
11#.##6.121.96:23
13#.##8.134.148:23
41.##.252.6:23
23#.##.206.134:2323
23#.##4.67.34:23
20.##.191.11:23
11#.##7.252.189:23
18#.##2.243.63:23
18#.##1.122.104:23
13#.##8.151.248:23
66.###.145.82:23
20#.##9.160.90:23
18#.##6.200.160:23
12#.##5.248.64:2323
19#.##4.91.201:23
56.###.136.155:23
21#.##.178.34:2323
37.###.177.109:23
10#.##.61.221:23
17.###.169.129:23
11#.##5.102.199:23
3.###.198.85:23
10#.##4.35.56:23
19#.##7.58.213:23
14#.##7.146.207:23
11#.#4.59.67:23
11#.##8.9.88:2323
12#.##0.69.78:23
22#.##4.25.173:23
9.###.185.62:23
24#.##9.52.195:23
43.#.51.178:23
13#.##.222.51:23
22#.##2.206.97:23
32.###.156.239:23
24#.##.119.68:23
11#.##6.81.131:2323
12#.##3.188.100:23
13#.##5.205.161:23
14#.##.146.41:23
19#.##.109.241:23
16#.#9.45.93:23
21#.##.244.118:23
14#.##6.193.62:23
16#.#4.29.35:23
39.###.244.144:23
23#.##.102.178:2323
80.##.94.238:23
18#.##7.126.134:23
23#.##6.251.209:23
54.###.108.204:23
32.###.240.93:23
3.##.131.34:23
86.##.133.164:23
79.##9.71.54:23
21#.##1.253.255:23
49.###.64.84:2323
17#.##.89.209:23
84.###.200.255:23
46.###.17.212:23
23#.##4.142.235:23
17#.##8.128.18:23
16#.##6.15.135:23
25#.##.189.222:23
83.###.143.145:23
24#.#.149.114:23
39.###.141.131:23
20#.##.254.192:23
18#.#.240.157:23
19#.###.122.153:2323
8.###.42.190:23
20#.#3.254.9:23
82.##0.66.22:23
70.###.156.65:23
24#.##6.5.113:23
23#.##.25.211:23
12#.##2.170.209:23
22#.##.152.204:23
13#.##9.117.24:23
17#.##2.198.165:23
23#.##.161.54:23
14#.###.242.175:2323
20#.##4.171.249:23
11#.##.66.100:23
82.###.214.26:23
77.##.115.220:23
24#.#.150.165:23
16#.##.152.121:23
22#.##.240.223:23
34.##.80.218:23
11#.##1.161.77:23
10#.##.43.198:2323
12.##.37.78:23
15#.##3.169.94:23
51.###.232.233:23
17#.#1.90.92:23
14.##.38.98:2323
15#.##4.121.129:23
20#.##.231.223:23
12#.##.87.136:23
15#.##3.232.61:23
27.###.173.97:23
18.###.114.93:23
94.##.211.55:23
22#.##8.221.2:23
71.###.187.240:23
65.##.245.217:2323
18#.##.145.147:23
16#.##1.205.208:23
19#.##0.99.154:23
22#.##.234.12:23
45.##.45.167:23
15#.##5.244.255:23
18#.##.23.182:23
69.##.150.218:23
21#.##.231.158:23
64.##.159.73:23
20#.##6.166.174:23
21#.##.15.248:23
16#.##5.217.43:2323
16#.##.144.111:23
14#.##.232.27:23
20#.##6.135.217:23
24#.##1.7.189:23
10#.##2.209.11:23
65.###.75.102:23
56.#.16.61:23
15#.##0.68.78:23
20#.#4.10.66:23
17#.##6.184.199:23
11#.##5.99.146:23
23#.##1.105.83:23
16#.##6.36.166:2323
50.##.9.77:23
73.##.168.107:23
15#.##2.189.173:23
77.###.238.189:23
11#.##3.247.134:23
16#.##.199.179:23
32.###.14.140:23
44.###.137.114:23
57.#.195.103:23
18#.###.231.100:2323
44.##.176.166:23
76.##.8.120:23
13#.##3.128.66:2323
25#.##0.115.127:23
40.##.120.63:23
12#.##.244.186:23
20#.##.181.32:23
15#.##5.209.108:23
25#.##.154.247:23
34.##.157.106:23
32.##8.89.49:23
11#.##5.121.7:23
1.###.76.246:2323
16#.##.113.207:23
14#.##6.75.122:23
1.##.49.2:23
95.#.228.249:23
24.###.154.167:23
11#.##1.63.241:23
66.##.127.35:23
94.##.40.254:23
57.###.109.210:23
13#.##.141.146:23
51.##.172.55:23
13#.##5.223.233:23
66.###.138.196:2323
67.##7.27.59:23
23#.##8.72.174:23
19#.##.19.143:23
34.##.158.37:23
20#.##9.23.116:23
25#.#.62.138:23
73.###.61.177:23
25.##7.10.78:23
8.###.31.210:23
12#.##.99.243:23
14#.##1.102.100:23
66.##.1.170:2323
13#.##.29.116:23
10#.##4.44.11:23
50.##.176.22:23
17#.##0.147.164:23
4.###.183.3:23
22#.##.35.227:23
19#.##.55.200:23
16.###.225.26:23
10#.##1.228.26:23
23#.##.48.212:23
10#.##.201.195:23
41.###.248.62:23
77.###.239.155:2323
72.##.146.247:23
14#.##3.101.99:23
12#.##.190.73:23
12#.##.143.145:23
21#.##9.25.220:23
24#.##6.36.102:23
51.###.182.247:23
90.##4.7.29:23
59.##1.52.55:23
17.##.102.193:2323
25#.##6.52.18:2323
24#.##.100.121:23
72.##9.62.89:23
19.##.231.66:23
91.###.224.150:23
14#.##8.202.130:23
64.##.199.75:23
46.###.236.109:23
5.##.145.122:23
66.###.65.146:23
61.##.25.30:2323
16#.##6.188.233:23
24#.##4.25.75:23
21#.##4.99.130:23
24#.#6.0.54:23
16#.##8.97.124:23
24#.##1.25.234:23
66.##.102.30:23
12#.##9.237.96:23
17#.##3.145.198:23
24#.##3.109.81:23
25.##.28.97:23
25#.##8.137.187:23
11#.##1.119.215:23
15#.##0.229.1:2323
2.###.165.54:23
84.###.69.171:23
81.###.159.40:23
23#.##0.255.30:23
20#.##.67.226:23
96.#.103.136:23
36.##.128.7:23
25#.##2.71.221:23
97.###.143.27:23
13#.##4.91.175:23
10#.#0.224.5:23
23#.##.116.248:2323
94.###.234.73:23
12#.##8.41.108:23
86.###.14.234:23
54.##.149.145:23
18#.##5.90.152:23
23#.##6.213.255:23
44.#.165.57:23
22#.##4.161.177:23
22#.##4.145.28:23
19#.##3.64.249:2323
52.##.101.198:23
15#.##.107.37:23
23#.##.108.142:23
15#.##1.221.113:23
4.###.174.12:23
56.###.177.180:23
53.##.93.97:23
19#.##7.12.18:23
24#.##.122.222:23
16#.##5.29.159:2323
82.###.21.112:23
90.###.196.39:23
11#.##3.246.178:23
81.###.40.211:23
57.##.32.122:23
14#.#6.83.80:23
15#.##.138.118:23
54.###.33.86:2323
24#.##.147.125:23
18#.##.148.66:23
20#.##2.231.113:23
15.###.158.232:23
20#.#9.246.7:23
24#.##.174.239:23
22#.##.112.218:23
21#.##.39.200:23
58.###.18.144:23
66.##.166.81:2323
17.###.154.253:23
16#.#3.25.71:23
16#.##.165.120:23
22#.##.179.172:23
12#.##3.103.136:23
21#.##.105.208:23
25#.##.21.128:23
15#.##.241.229:23
76.##.199.150:23
89.##.216.122:2323
18#.##4.189.11:23
13#.##1.251.233:23
24#.##.252.11:23
24#.##7.231.183:23
22#.##8.3.166:23
78.##.22.129:23
24#.##.59.171:23
20#.##.52.133:23
15#.##7.118.196:23
13#.##3.40.143:23
15#.##2.165.231:23
4.##.186.43:23
39.##4.17.30:23
13#.#0.9.33:23
64.##.226.187:2323
89.##.79.222:23
13#.##.28.229:23
85.###.30.148:23
24#.##.163.169:23
38.###.203.206:23
77.#.52.22:23
12#.#09.3.33:23
18#.##.221.172:23
13#.##2.187.180:23
19#.##9.100.64:2323
24#.##5.122.236:23

Получает данные от следующих серверов:

85.###.34.70:9110

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению