[spam][crazy] bomb malware
Karl
gmkarl at gmail.com
Tue Dec 14 02:37:16 PST 2021
Mirai/776c341504769aa67af7efc5acc66c338dab5684a8579134d3f23165c7abcc00
ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV),
statically linked, stripped
Mirai/3f6120ca0ff7cf6389ce392d4018a5e40b131a083b071187bf54c900e2edad26.sh
ASCII shell script, with CRLF line terminators, indicating it was
written on windows
connects 3 times to 62.210.130.250, downloading and locally
executing a file each time:
- /web/admin/x86
- /web/admin/x86_g
- /web/admin/x86_64
Kinsing/7e9663f87255ae2ff78eb882efe8736431368f341849fec000543f027bdb4512.sh
POSIX shell script, ASCII text executable
Kinsing/6e25ad03103a1a972b78c642bac09060fa79c460011dc5748cbb433cc459938b.elf
ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically
linked, stripped
Muhstik/15e7942ebf88a51346d3a5975bb1c2d87996799e6255db9e92aed798d279b36b
ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV),
statically linked, stripped
More information about the cypherpunks
mailing list