⚠TROYANOSYVIRUS
Active Threat • LOW

39.99.164.97

Country of Origin🇨🇳 China
First Detection2/26/2026
Last Activity2/26/2026
ISPHangzhou Alibaba Advertising Co.,Ltd.
🎯
23
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
1
Malware

Geolocation

Country
🇨🇳 China
City
Beijing
ASN
AS37963
ISP
Hangzhou Alibaba Advertising Co.,Ltd.

Attack Types

cowrie

Attacked Ports

22

Associated Malware

3e76d8cd4590f34d79ea...→

Attempted Credentials

🔐root/123456
1x
🔐root/password
1x

Executed Commands

$/tmp/uybMX44qy3 kxpCo3kZ2+PZuHmQIsXILY58vt7t2g5mqEgU7O0KX65mGtT92b1+nirHwjWPeLbG/NQZea5EAOjuC0OudxHS/sa6eJApxso1jH++0vvSEWOtUQvu7RRAqmYO0/jboH+JIcTCKo9+rtz6zBFlqF8O7fALRKBhENP+3a58jCjcxyyQf7/c49MZYaBHCu/vClGuZA7T+N2gfIgo3MEthHu+2fzTAGaoSBTs7AxfqGcZzP7ctHuOKsPGO4p6oNr50A5lqUEU5ukAR6pmENHt3L1jjy7H3CqGfqDa/NIaYapAC+/+DEa0ZRDX49m9eZAtxMgtjny92O3UEnmtQxTu8AtCrW0W0vzYuG2MK8XcKYp5oNr51w5jr0sM7u8JRbpmFNXj2bZ/kCnCwzWJebTe/dMUZLpAC+nwC0SieRHS/ca/eI4hxMIqiniu2fvWDm6oXwvu6hRGqm0W0vzbvm2PI8fcKY1+oNv7zBFhq0sM2x
$head -c 0 > linux_sign1x
$head -c 0 > miner1x
$cp /tmp/uybMX44qy3 /tmp/linux1x
$head -c 0 > windows_sign1x
$head -c 0 > /tmp/uybMX44qy31x
$cat /bin/echo1x
$head -c 0 > winminer1x
$head -c 0 > miner_sign1x
$head -c 0 > winminer_sign1x

Risk Assessment

25
/100
LowMediumHighCritical