Technical Information
Malicious functions:
Removes itself
Launches itself as a daemon
Substitutes application name for:
- vf5sqvseikk2
Network activity:
Awaits incoming connections on ports:
- 127.0.0.1:3132
Establishes connection:
- 8.#.8.8:53
- 5.###.227.65:61002
Other HTTP requests:
- http://###.#24.181.214/
Sends data to the following servers:
- 14#.##4.35.177:8888
- 37.##.87.142:82
- 10.##.241.5:81
- 19#.###.113.172:8888
- 10#.###.177.154:5555
- 18#.##3.78.63:8080
- 25#.##8.1.218:80
- 15#.##8.17.203:8000
- 15#.##.152.219:9090
- 16#.#4.1.203:80
- 33.##.27.100:8081
- 20#.##1.147.210:82
- 17#.##1.35.125:90
- 94.##.154.109:90
- 18#.##.205.184:5000
- 20#.##2.174.48:82
- 15#.##0.140.88:5000
- 16#.###.224.122:8080
- 24#.##5.120.202:81
- 69.###.57.55:8888
- 40.##.198.82:81
- 32.#.#19.119:5555
- 23#.##9.38.156:80
- 2.##.#05.171:9000
- 17#.###.166.180:8081
- 15#.##.64.42:8081
- 68.##.254.208:82
- 89.###.9.241:5555
- 22#.##4.82.80:88
- 17#.##.62.148:9000
- 22#.###.247.105:9090
- 15#.##1.213.27:5000
- 11#.##0.63.177:90
- 19#.###.146.162:8888
- 15#.##.174.144:9000
- 17#.#18.8.6:90
- 63.###.198.149:90
- 25#.##.164.43:81
- 19#.##4.39.11:9000
- 13#.###.179.230:8081
- 59.###.159.204:5555
- 17#.##.246.78:83
- 12#.##1.239.116:81
- 10#.##4.96.149:80
- 15.###.141.165:80
- 14#.##0.33.254:9090
- 16#.##8.20.223:9000
- 23#.##.16.238:5555
- 59.###.105.43:5000
- 13#.##.203.163:5000
- 14#.##5.201.239:88
- 13.###.207.183:82
- 24#.##2.4.250:82
- 19#.##.244.74:90
- 20#.###.120.208:8000
- 9.###.249.226:5555
- 14.##.242.227:9000
- 16#.##0.69.247:80
- 10#.###.242.106:8080
- 12#.##0.42.253:5000
- 14#.##.174.14:88
- 23#.##.209.199:8081
- 22#.###.152.149:5555
- 14#.#2.18.54:88
- 8.##.218.232:83
- 24#.##.136.183:83
- 71.###.116.62:8888
- 24#.##2.14.235:88
- 8.###.105.15:81
- 12#.##.163.114:81
- 18#.##.250.16:5000
- 10#.##6.72.217:8081
- 13#.##0.105.13:9000
- 13#.##8.155.3:8888
- 75.##.59.85:90
- 72.###.178.197:8080
- 61.##.143.55:81
- 9.###.73.118:81
- 38.##.115.143:8081
- 20#.##4.50.171:90
- 15.###.64.140:8081
- 19#.###.139.226:8081
- 23#.##.225.19:90
- 53.###.220.15:5555
- 3.##.168.237:80
- 23#.##.43.153:90
- 83.##.167.15:8000
- 10#.##0.247.161:80
- 21#.###.196.178:8888
- 19#.##8.56.214:8888
- 24#.###.181.112:8000
- 20.##.167.68:8888
- 23#.###.103.245:9000
- 19#.#.212.223:9000
- 11#.##.133.184:81
- 86.###.35.202:80
- 23#.##5.198.96:90
- 20#.#.250.238:5000
- 25#.##2.74.214:8000
- 63.###.125.215:8000
- 68.###.224.73:88
- 20#.##0.91.12:8081
- 95.###.45.181:82
- 10#.##.140.192:8080
- 16#.##3.153.48:90
- 25#.##9.60.230:8081
- 95.###.227.144:88
- 61.##.4.4:8000
- 21#.#.154.130:83
- 15#.#6.167.4:82
- 23#.##8.38.200:9090
- 12.##.223.104:9090
- 48.##.110.218:9000
- 13#.##2.203.41:88
- 21#.##3.93.183:5555
- 12#.##4.24.203:9000
- 11#.#4.96.43:80
- 14#.###.171.109:9090
- 49.##.117.54:8000
- 22#.##1.12.89:82
- 10#.##.101.14:8080
- 53.##.35.89:81
- 12#.##6.69.243:82
- 12#.##0.15.99:8888
- 10#.##6.128.237:81
- 4.#.##4.181:8081
- 22.##.59.68:8080
- 17#.##.20.88:5000
- 19#.##.99.120:5555
- 20#.##.158.80:5555
- 18#.##7.205.90:81
- 16.###.251.123:8888
- 31.###.76.210:8081
- 16#.##.235.203:83
- 21#.##.181.241:80
- 35.###.190.190:88
- 4.###.73.179:81
- 11#.##8.164.76:90
- 24.##.17.236:8000
- 38.###.183.182:8081
- 24#.##8.13.224:82
- 15#.###.181.107:9090
- 46.###.235.94:81
- 30.###.235.173:9090
- 24#.##9.5.226:9000
- 30.###.249.81:82
- 11#.#.70.167:8080
- 16.#.#38.35:8081
- 22#.##.163.208:8080
- 31.###.82.130:8000
- 14#.###.222.128:9000
- 16.###.10.183:80
- 19#.##8.125.173:82
- 23#.##8.67.189:5000
- 20#.##7.128.139:81
- 11#.##.244.32:90
- 10.###.105.71:9090
- 21#.###.118.111:8081
- 18.###.27.153:81
- 20#.##.236.238:82
- 95.###.188.143:5000
- 88.###.73.206:5000
- 18#.##4.25.130:90
- 21#.##8.92.29:8081
- 15#.##1.12.99:8081
- 14#.##9.160.98:9090
- 15#.##.213.199:5555
- 27.###.230.96:82
- 40.##.211.208:8080
- 17.##0.59.2:82
- 25#.##3.79.170:8888
- 31.###.197.225:5000
- 55.###.143.139:88
- 42.###.157.15:8080
- 92.###.135.204:9090
- 21.##.227.207:81
- 64.###.27.149:90
- 13#.##1.234.165:81
- 11#.#.57.102:8888
- 19#.###.178.254:8000
- 15#.##.44.5:8000
- 61.#.#00.91:5555
- 54.##.157.3:81
- 28.###.4.77:5000
- 13#.##.208.249:80
- 14#.###.192.123:9000
- 13#.##.54.109:8888
- 87.##5.44.93:83
- 20#.##4.165.136:80
- 16#.##.114.75:5000
- 75.##.148.154:8888
- 88.###.202.130:80
- 44.##0.8.143:83
- 15#.##7.120.203:80
- 24#.##7.212.138:82
- 11#.##8.233.65:5555
- 23#.###.180.204:9090
- 17#.###.169.107:8000
- 25#.##.80.216:82
- 22#.#3.115.0:83
- 10#.###.233.197:5555
- 23.##.54.196:90
- 74.##3.122.3:80
- 14#.##1.166.100:80
- 19#.##.158.28:82
- 21#.###.187.180:8888
- 16#.##7.14.239:8888
- 25#.##6.162.29:8081
- 20#.###.211.139:9090
- 14.##.251.170:9000
- 14#.##2.90.148:8888
- 25#.###.158.141:8000
- 15#.##5.61.192:81
- 58.###.11.140:80
- 24#.##3.57.249:88
- 11#.##0.179.41:8000
- 10#.#.7.118:8000
- 44.#.73.40:5000
- 23#.##.177.121:90
- 13#.##2.153.78:80
- 68.###.10.141:5000
- 13.###.218.126:5555
- 13#.##.177.195:8080
- 15#.##.91.21:5000
- 10.##.213.180:8080
- 18#.##3.247.52:5000
- 10#.##.126.14:81
- 1.#.#1.30:8080
- 14#.##1.163.156:90
- 93.###.161.196:90
- 14#.##4.133.212:82
- 22#.##.8.154:5555
- 18#.##.243.242:82
- 19#.###.178.204:9000
- 24#.##.135.194:83
- 81.##6.82.56:82
- 10#.##4.193.107:90
- 17#.##9.1.181:9090
- 13#.#0.41.43:88
