Техническая информация
Вредоносные функции:
Самоудаляется
Запускает себя в качестве демона
Подменяет имя приложения на:
- (null)
Завершает системные процессы:
- sshd
Сетевая активность:
Ожидает входящих соединений на портах:
- 127.0.0.1:2174
Устанавливает соединение:
- 8.#.8.8:53
- 94.###.43.254:53
- 89.###.90.159:2348
Проводит атаку перебором по словарю (брутфорс) по протоколу Telnet.
DNS ASK:
- na###ne.pirate
Посылает данные следующим серверам:
- 89.###.90.159:2348
- 67.##.28.175:23
- 16#.##2.28.130:23
- 50.###.185.218:23
- 18#.##.123.213:23
- 21#.##6.235.115:23
- 11#.##0.113.60:23
- 34.##.203.211:23
- 13#.##2.251.251:23
- 68.###.37.155:23
- 10#.##5.173.74:23
- 14#.##.191.169:23
- 10#.##0.188.229:23
- 78.##.48.120:23
- 95.###.246.175:23
- 79.###.11.172:23
- 95.##.60.41:23
- 8.#.9.10:23
- 15#.#.112.85:23
- 73.###.237.51:23
- 14#.##.133.230:23
- 21#.##.160.12:23
- 18#.##4.243.88:23
- 47.##.158.220:23
- 68.###.43.227:23
- 67.##.20.32:23
- 16#.##0.208.204:23
- 19#.##7.33.224:23
- 86.##6.89.76:23
- 16#.##.91.228:23
- 19#.##.178.109:23
- 8.##.128.144:23
- 54.##.175.116:23
- 19#.##5.203.181:23
- 20#.##5.67.178:23
- 17#.##5.219.45:23
- 16#.##2.169.125:23
- 10#.##3.39.194:23
- 19#.##6.254.78:23
- 67.##.213.145:23
- 16#.##.39.240:23
- 32.###.116.219:23
- 19#.##4.80.157:23
- 13#.##1.144.163:23
- 10#.##9.129.158:23
- 59.##2.14.6:23
- 4.###.29.75:23
- 15#.##9.176.252:23
- 77.###.207.230:23
- 17#.##6.230.167:23
- 20.##.251.198:23
- 34.##.46.36:23
- 89.###.90.217:23
- 10#.##.220.38:23
- 14#.##5.197.53:23
- 78.##4.82.45:23
- 12#.##.136.204:23
- 12#.#9.1.25:23
- 14#.##.190.62:23
- 59.###.168.33:23
- 80.###.25.214:23
- 12#.##5.158.9:23
- 19#.##.105.172:23
- 21#.##4.164.37:23
- 68.###.206.61:23
- 39.###.244.170:23
- 47.##.228.24:23
- 72.##.142.97:23
- 21#.##6.221.41:23
- 52.###.211.136:23
- 18#.##.222.167:23
- 13#.##5.75.76:23
- 22#.##0.86.230:23
- 32.###.169.12:23
- 10#.##4.166.111:23
- 18#.##6.120.44:23
- 64.###.74.212:23
- 17#.##3.113.233:23
- 18.###.107.175:23
- 31.##.85.96:23
- 82.###.63.157:23
- 14#.##2.39.49:23
- 99.##9.98.74:23
- 97.###.179.12:23
- 19#.##.180.58:23
- 16#.##4.91.107:23
- 12#.##.114.34:23
- 15#.##0.143.68:23
- 18#.##9.125.68:23
- 19#.##0.184.53:23
- 13#.##5.243.193:23
- 85.###.130.180:23
- 20#.##8.185.139:23
- 32.###.235.88:23
- 16#.##2.115.82:23
- 73.###.212.247:23
- 18#.##2.243.130:23
- 80.###.101.19:23
- 17#.##.196.123:23
- 18#.##3.27.56:23
- 72.###.232.250:23
- 10#.##.206.27:23
- 11#.##.41.223:23
- 77.###.103.128:23
- 13#.##1.233.233:23
- 19#.##3.211.20:23
- 52.###.213.252:23
- 63.###.21.219:23
- 11#.##1.249.12:23
- 11#.##8.73.96:23
- 25.#.134.20:23
- 20#.##5.111.86:23
- 21#.#1.99.45:23
- 14#.##.212.153:23
- 91.##.57.14:23
- 20#.##.233.94:23
- 58.###.104.23:23
- 12#.#6.25.54:23
- 20#.##.255.243:23
- 45.##.210.159:23
- 4.###.150.108:23
- 10#.#4.26.98:23
- 15#.##.154.204:23
- 86.###.190.20:23
- 12#.##1.100.6:23
- 93.###.240.162:23
- 15#.#8.167.8:23
- 10#.#0.9.190:23
- 16#.##.209.223:23
- 89.#.21.209:23
- 12.##9.0.85:23
- 72.##.14.12:23
- 13#.##3.110.38:23
- 18#.##.132.43:23
- 16#.##.126.176:23
- 10#.##.212.159:23
- 27.###.129.64:23
- 19#.##.129.85:23
- 78.###.62.182:23
- 11#.##8.52.173:23
- 19#.##.169.188:23
- 40.##.74.158:23
- 13#.##9.29.108:23
- 18#.##2.17.166:23
- 13#.#.208.60:23
- 14#.##1.5.110:23
- 18#.##.221.243:23
- 16#.##3.27.171:23
- 18#.#7.11.40:23
- 68.##4.7.150:23
- 17#.#.60.166:23
- 14#.#.29.57:23
- 18#.##.113.159:23
- 21#.##5.149.153:23
- 40.##9.89.54:23
- 19#.##5.56.238:23
- 93.###.203.110:23
- 12#.##.218.173:23
- 13#.##.215.125:23
- 38.##.153.190:23
- 19#.##9.54.164:23
- 85.###.22.236:23
- 4.#.#13.134:23
- 11#.##8.241.148:23
- 21#.##6.132.87:23
- 17#.##9.231.16:23
- 80.##.61.225:23
- 71.###.70.218:23
- 19#.##.212.216:23
- 38.#.104.124:23
- 20#.##.69.187:23
- 34.###.40.136:23
- 11#.##.177.174:23
- 91.##9.14.56:23
- 79.##.111.41:23
- 97.##.78.23:23
- 16#.##3.136.156:23
- 19#.##9.120.151:23
- 78.###.154.236:23
- 20#.#5.69.65:23
- 70.##.62.240:23
- 27.###.141.14:23
- 11#.##2.160.73:23
- 10#.##4.102.75:23
- 11#.##.96.209:23
- 84.###.45.238:23
- 15#.##9.221.2:23
- 19#.##0.213.205:23
- 16#.##8.98.237:23
- 19#.##1.97.223:23
- 70.###.148.210:23
- 13#.##.100.55:23
- 12#.##1.21.129:23
- 64.#.209.114:23
- 10#.#15.5.9:23
- 69.##.252.121:23
- 15#.#16.7.92:23
- 19#.##.70.235:23
- 45.##.49.157:23
- 62.##.240.30:23
- 79.##0.94.21:23
- 21#.##9.175.79:23
- 14#.##0.186.72:23
- 14.##.195.30:23
- 19#.##9.217.142:23
- 19#.##2.72.54:23
- 84.#.124.126:23
- 11#.#3.46.64:23
- 74.##.11.188:23
- 9.###.147.170:23
- 18#.##.106.196:23
- 77.##4.97.0:23
- 18#.##9.141.29:23
- 24.##5.192.3:23
- 21#.##3.80.88:23
- 24.##6.21.33:23
- 25.##.127.93:23
- 27.###.214.235:23
- 10#.##.142.57:23
- 13#.##6.198.217:23
- 13#.##3.21.109:23
- 21#.##4.45.195:23
- 57.###.98.238:23
- 82.##.188.1:23
- 20.###.215.28:23
- 16#.##1.136.6:23
- 88.###.189.110:23
- 76.###.249.211:23
- 10#.#1.75.43:23
- 18#.##.182.202:23
- 16#.##9.16.129:23
- 69.###.207.179:23
- 67.##.195.178:23
- 90.###.251.58:23
- 13#.##2.220.131:23
- 16#.##2.255.151:23
- 17#.##2.151.245:23
- 13#.##.172.232:23
- 11#.##0.101.203:23
- 48.##.64.45:23
- 60.##.211.179:23
- 12#.##5.79.237:23
- 18#.##.251.57:23
- 74.###.24.122:23
- 50.###.130.157:23
- 10#.##4.59.48:23
- 11#.##0.101.63:23
- 91.###.142.107:23
- 21#.##.125.60:23
- 21#.##9.50.231:23
- 21#.##.62.198:23
- 11#.##9.73.253:23
- 98.##.215.4:23
- 75.##.42.151:23
- 13.###.194.129:23
- 16#.##0.177.185:23
- 23.###.44.144:23
- 36.##.148.251:23
- 11#.##4.181.30:23
- 85.###.157.126:23
- 14#.##4.102.85:23
- 12.###.55.183:23
- 19#.##7.2.217:23
- 12.###.108.228:23
- 60.##5.37.6:23
- 18#.#.153.17:23
- 12#.##.235.192:23
- 16#.##0.28.44:23
- 13#.##.125.155:23
- 39.###.113.121:23
- 52.###.61.103:23
- 51.##.2.148:23
- 84.##.190.90:23
- 14#.##6.121.198:23
- 18#.#7.26.25:23
- 66.###.151.200:23
- 25.###.203.13:23
- 75.##.125.33:23
- 21#.##4.252.138:23
- 11#.##.29.113:23
- 15#.##2.248.8:23
- 15#.##3.173.40:23
- 82.###.72.233:23
- 85.###.250.25:23
- 92.###.151.69:23
- 71.##.151.184:23
- 15#.##5.198.55:23
- 15#.##9.101.23:23
- 87.##.245.12:23
- 20#.##5.190.175:23
- 20#.##7.35.106:23
- 21#.#1.93.86:23
- 16#.##7.151.60:23
- 11#.##.231.39:23
- 4.##.236.158:23
- 22#.##1.206.217:23
- 21#.##.123.55:23
- 20#.##.48.229:23
- 16#.#.233.135:23
- 18#.##5.67.13:23
- 16#.##7.95.71:23
- 65.##.247.35:23
- 45.###.59.120:23
- 11#.#6.39.43:23
- 11#.##9.51.131:23
- 90.###.36.205:23
- 14#.##9.128.198:23
- 13.##.55.250:23
- 10#.##8.88.231:23
- 46.###.157.137:23
- 20#.##8.110.186:23
- 21#.##7.199.150:23
- 57.###.82.126:23
- 22#.##.178.176:23
- 12#.##.51.246:23
- 11#.##9.215.192:23
- 15#.##3.190.126:23
- 98.##.2.189:23
- 99.##1.26.46:23
- 25.###.237.210:23
- 12#.##.193.118:23
- 10#.##.25.106:23
- 15#.##0.235.235:23
- 17#.#3.2.137:23
- 49.##4.90.14:23
- 52.###.45.202:23
- 49.#.224.183:23
- 10#.##.114.38:23
- 81.###.17.106:23
- 15#.#8.94.16:23
- 14.##.224.185:23
- 41.##.133.38:23
- 20#.##4.55.97:23
- 22#.##.177.242:23
- 13#.##8.226.168:23
- 17#.##7.75.101:23
- 60.##.72.182:23
- 12#.##1.144.241:23
- 69.##6.3.1:23
- 14#.##9.164.207:23
- 16#.##5.174.3:23
- 83.##.212.187:23
- 70.###.103.154:23
- 84.###.62.114:23
- 10#.##6.111.253:23
- 15#.##1.188.26:23
- 99.#.129.111:23
- 21#.##3.163.18:23
- 45.##.223.139:23
- 13#.##.114.189:23
- 31.###.117.185:23
- 10#.##5.100.238:23
- 31.##.1.241:23
- 13#.##.224.194:23
- 17#.##.118.138:23
- 19#.##5.79.17:23
- 49.##.8.12:23
- 39.###.149.159:23
- 38.##.138.124:23
- 87.##7.92.33:23
- 20#.##0.116.165:23
- 10#.##3.120.146:23
- 10#.##.55.215:23
- 13#.##2.22.48:23
- 19#.#3.54.58:23
- 21#.##7.14.180:23
- 52.###.179.189:23
- 16#.##5.18.225:23
- 38.###.146.205:23
- 5.##.69.243:23
- 12#.##3.253.72:23
- 18#.##.239.72:23
- 50.###.104.57:23
- 49.###.40.156:23
- 17#.##.102.173:23
- 27.##.198.134:23
- 20#.##3.186.126:23
- 64.##.244.75:23
- 12.##8.63.27:23
- 79.#.76.250:23
- 32.##.169.159:23
- 16#.##2.61.28:23
- 95.###.37.250:23
- 49.#.22.2:23
- 47.###.146.249:23
- 40.###.252.220:23
- 10#.##.94.100:23
- 17#.#2.16.36:23
- 18#.##.193.109:23
- 25.#.73.237:23
- 21#.##.116.138:23
- 78.##4.4.241:23
- 22#.#82.9.49:23
- 18#.##.47.186:23
Получает данные от следующих серверов:
- 89.###.90.159:2348
