Technical Information
Malicious functions:
Removes itself
Launches itself as a daemon
Substitutes application name for:
- 5oji77oggmkj
Performs process tracing:
- swapper/0
Kills the following processes:
- run.sh
- bash
- 5oji77oggmkj
Network activity:
Awaits incoming connections on ports:
- 127.0.0.1:8345
Establishes connection:
- 8.#.8.8:53
- 19#.##.195.195:53
- 21#.##.149.10:35342
- 34.##.176.168:37215
DNS ASK:
- se#.#######cyber-security-rebirthltd.su
Sends data to the following servers:
- 17#.##.99.99:37215
- 41.###.3.74:37215
- 19#.##.78.50:37215
- 20#.##.237.20:37215
- 66.###.146.107:37215
- 41.###.77.107:37215
- 19#.##.118.227:37215
- 19#.##.160.24:37215
- 16#.##.175.58:37215
- 41.###.63.242:37215
- 15#.##.156.204:37215
- 41.##.75.64:37215
- 19#.###.226.239:37215
- 88.###.221.154:37215
- 41.###.69.113:37215
- 19#.###.26.230:37215
- 15#.###.211.225:37215
- 19#.###.166.11:37215
- 14#.##.158.94:37215
- 41.##.97.51:37215
- 19#.###.189.142:37215
- 41.###.203.46:37215
- 15#.###.97.223:37215
- 12#.##.15.200:37215
- 15#.###.118.45:37215
- 41.##.228.115:37215
- 15#.##.36.0:37215
- 15#.###.240.243:37215
- 15#.###.93.132:37215
- 19#.###.132.107:37215
- 15#.###.220.30:37215
- 15#.###.114.43:37215
- 19#.##.102.94:37215
- 15#.###.156.17:37215
- 19#.###.134.173:37215
- 19#.###.111.204:37215
- 94.##.180.154:37215
- 41.##.178.159:37215
- 41.##.20.99:37215
- 15#.##.226.157:37215
- 19#.##1.91.61:37215
- 19#.##0.22.93:37215
- 41.###.126.199:37215
- 41.#.#1.122:37215
- 73.###.136.182:37215
- 41.###.233.179:37215
- 14#.###.70.121:37215
- 19#.###.153.186:37215
- 19#.##.183.2:37215
- 15#.###.106.245:37215
- 41.###.44.34:37215
- 41.###.180.8:37215
- 15#.##7.6.97:37215
- 19#.###.101.145:37215
- 19#.###.131.227:37215
- 15#.##.79.108:37215
- 9.###.141.118:37215
- 19#.##.79.49:37215
- 15#.###.243.126:37215
- 41.###.24.98:37215
- 19#.###.174.98:37215
- 41.###.198.10:37215
- 19#.##.109.98:37215
- 19#.##.46.137:37215
- 15#.##.148.159:37215
- 20#.###.178.36:37215
- 19#.###.104.210:37215
- 15#.##.144.87:37215
- 19#.##.17.100:37215
- 15#.###.92.160:37215
- 20#.###.229.78:37215
- 97.###.16.76:37215
- 19#.##.63.52:37215
- 17#.##.102.52:37215
- 11#.###.134.28:37215
- 15#.###.134.70:37215
- 19#.###.44.206:37215
- 19#.###.246.46:37215
- 15#.###.100.195:37215
- 15#.##9.89.46:37215
- 15#.##.114.145:37215
- 19#.###.113.51:37215
- 11#.##5.7.78:37215
- 41.##.123.169:37215
- 41.##.131.137:37215
- 41.###.197.198:37215
- 13#.##.109.190:37215
- 15#.#.50.118:37215
- 13#.###.139.70:37215
- 41.###.130.53:37215
- 15#.##3.93.89:37215
- 19#.###.126.237:37215
- 86.##.14.45:37215
- 12.###.59.85:37215
- 19#.##7.1.234:37215
- 15#.##.216.156:37215
- 88.##.50.167:37215
- 13#.###.249.66:37215
- 21#.###.175.238:37215
- 45.###.18.42:37215
- 13#.##.127.59:37215
- 1.##.#51.183:37215
- 19#.##6.6.60:37215
- 41.##.166.4:37215
- 18#.##.184.73:37215
- 15#.###.109.90:37215
- 15#.###.106.43:37215
- 15#.###.22.101:37215
- 19#.##.160.18:37215
- 34.##.176.168:37215
- 10#.###.179.200:37215
- 15#.##.92.6:37215
- 15#.###.91.169:37215
- 79.###.67.240:37215
- 76.##.53.59:37215
- 15#.##.180.48:37215
- 19#.###.71.188:37215
- 19#.##.192.99:37215
- 15#.#.209.250:37215
- 19#.##.215.214:37215
- 41.###.147.194:37215
- 19#.##4.55.94:37215
- 19#.###.96.210:37215
- 19#.###.246.36:37215
- 15#.###.75.161:37215
- 41.##.133.19:37215
- 19.##.22.135:37215
- 41.###.183.21:37215
- 19#.###.14.244:37215
- 19#.###.200.137:37215
- 15#.###.174.85:37215
- 15#.###.128.224:37215
- 15#.##.218.132:37215
- 21#.###.205.93:37215
- 41.##.179.169:37215
- 19#.##.169.32:37215
- 19#.###.154.148:37215
- 19#.###.11.136:37215
- 19#.##4.89.85:37215
- 19#.##.41.12:37215
- 15#.##.5.51:37215
- 41.###.0.183:37215
- 19#.###.172.223:37215
- 15#.##.51.189:37215
- 19#.##0.88.7:37215
- 17#.###.156.17:37215
- 41.###.218.207:37215
- 16#.###.50.231:37215
- 19#.###.213.207:37215
- 15#.##.38.101:37215
- 19#.#.70.239:37215
- 66.###.92.215:37215
- 19#.###.104.51:37215
- 19#.###.179.183:37215
- 15#.##.133.75:37215
- 15#.###.198.77:37215
- 15#.##.201.234:37215
- 41.##.175.211:37215
- 41.##.22.50:37215
- 15#.###.253.127:37215
- 19#.###.254.251:37215
- 41.###.74.193:37215
- 15#.###.243.210:37215
- 19#.###.192.40:37215
- 19#.##.230.118:37215
- 15#.##.101.202:37215
- 41.###.62.26:37215
- 19#.###.112.192:37215
- 13#.##6.31.57:37215
- 19#.##.67.34:37215
- 41.###.193.156:37215
- 41.##.242.203:37215
- 18#.###.30.130:37215
- 41.###.49.27:37215
- 72.###.86.237:37215
- 41.###.166.75:37215
- 15#.###.118.248:37215
- 21#.##0.26.42:37215
- 19#.###.175.16:37215
- 41.###.118.40:37215
- 41.###.213.191:37215
- 19#.###.183.111:37215
- 19#.##.2.148:37215
- 19#.##.174.17:37215
- 14#.###.231.237:37215
- 15#.###.115.134:37215
- 15#.###.196.161:37215
- 64.###.139.187:37215
- 15#.##6.8.180:37215
- 41.##.6.11:37215
- 41.###.249.203:37215
- 18#.###.255.65:37215
- 19#.###.219.36:37215
- 37.###.179.72:37215
- 5.##.#9.178:37215
- 41.###.36.194:37215
- 41.###.44.125:37215
- 19#.##.89.187:37215
- 15#.##.167.62:37215
- 41.###.42.78:37215
- 19#.###.111.101:37215
- 15#.##.98.98:37215
- 15#.##.20.139:37215
- 41.###.210.248:37215
- 19#.###.123.35:37215
- 19#.##5.68.89:37215
- 41.###.40.70:37215
- 12#.###.114.229:37215
- 15#.##.90.177:37215
- 19#.###.236.66:37215
- 41.###.27.202:37215
- 19#.##.157.78:37215
- 20#.###.239.169:37215
- 19#.###.17.106:37215
- 15#.##0.88.62:37215
- 15#.##.248.145:37215
- 19#.###.214.183:37215
- 15#.##.116.104:37215
- 14#.##.147.95:37215
- 41.##.93.169:37215
- 19#.###.69.181:37215
- 19#.###.246.195:37215
- 15#.###.228.204:37215
- 41.###.214.228:37215
- 41.###.153.245:37215
- 70.###.163.19:37215
- 27.###.101.244:37215
- 41.##.111.59:37215
- 15#.###.230.227:37215
- 41.##.64.84:37215
- 41.###.125.113:37215
- 15#.###.74.135:37215
- 15#.##.224.125:37215
- 41.###.239.255:37215
- 15#.###.93.141:37215
- 41.###.125.250:37215
- 41.###.78.135:37215
- 41.##.100.213:37215
- 16#.##.190.79:37215
- 92.##.174.82:37215
- 41.###.3.102:37215
- 17#.###.101.222:37215
- 15#.###.196.47:37215
- 19#.###.116.88:37215
- 11#.###.53.253:37215
- 15#.##1.30.20:37215
- 19#.###.232.202:37215
- 19#.###.238.41:37215
- 15#.###.111.89:37215
- 19#.###.183.155:37215
- 15#.##.50.150:37215
- 41.##.114.159:37215
- 15#.##.156.48:37215
- 19#.##9.12.25:37215
- 15#.###.172.182:37215
- 19#.###.149.168:37215
- 15#.###.101.138:37215
- 41.###.217.248:37215
- 19#.###.180.87:37215
- 41.###.157.79:37215
- 19#.##7.204.1:37215
- 15#.##.15.35:37215
- 14#.##.39.43:37215
- 19#.##.141.85:37215
- 15#.###.19.179:37215
- 15#.###.58.102:37215
- 19#.###.213.221:37215
- 41.##.243.90:37215
- 41.##.172.6:37215
- 41.###.170.155:37215
- 15#.###.53.233:37215
- 10#.###.99.107:37215
- 19#.###.249.228:37215
- 19#.###.179.179:37215
- 68.###.103.13:37215
- 19#.##3.22.4:37215
- 19#.##9.16.6:37215
- 11#.###.119.97:37215
- 41.###.233.193:37215
- 19#.##.183.116:37215
- 13#.###.129.55:37215
- 19#.###.43.203:37215
- 36.###.155.186:37215
- 15#.###.152.118:37215
- 15#.##8.5.236:37215
- 18.###.103.22:37215
- 41.###.211.12:37215
- 19#.###.253.40:37215
- 41.###.26.126:37215
- 19#.###.135.179:37215
- 19#.###.129.148:37215
- 19#.###.167.45:37215
- 16#.###.185.234:37215
- 19#.##.82.228:37215
- 15#.###.199.118:37215
- 13#.###.61.229:37215
- 41.###.55.5:37215
- 19#.###.220.35:37215
- 15#.###.14.108:37215
- 15#.###.240.129:37215
- 63.##.71.221:37215
- 19#.##.252.217:37215
- 38.##.91.241:37215
- 15#.###.208.95:37215
- 15#.##.8.255:37215
- 88.###.47.130:37215
- 11#.##.73.179:37215
- 11#.###.164.72:37215
- 19#.###.66.131:37215
- 15#.##.225.138:37215
- 19#.###.238.111:37215
- 19#.##.124.229:37215
- 41.##.172.119:37215
- 15#.###.29.161:37215
- 10#.##.254.95:37215
- 41.##.54.195:37215
- 41.##.146.147:37215
- 46.###.207.146:37215
- 15#.##.192.63:37215
- 21#.##.149.10:35342
Receives data from the following servers:
- 21#.##.149.10:35342
