[spam][crazy] bomb malware

Karl gmkarl at gmail.com
Tue Dec 14 02:37:16 PST 2021


Mirai/776c341504769aa67af7efc5acc66c338dab5684a8579134d3f23165c7abcc00
    ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV),
statically linked, stripped

Mirai/3f6120ca0ff7cf6389ce392d4018a5e40b131a083b071187bf54c900e2edad26.sh
    ASCII shell script, with CRLF line terminators, indicating it was
written on windows
    connects 3 times to 62.210.130.250, downloading and locally
executing a file each time:
        - /web/admin/x86
        - /web/admin/x86_g
        - /web/admin/x86_64

Kinsing/7e9663f87255ae2ff78eb882efe8736431368f341849fec000543f027bdb4512.sh
    POSIX shell script, ASCII text executable

Kinsing/6e25ad03103a1a972b78c642bac09060fa79c460011dc5748cbb433cc459938b.elf
    ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically
linked, stripped

Muhstik/15e7942ebf88a51346d3a5975bb1c2d87996799e6255db9e92aed798d279b36b
    ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV),
statically linked, stripped


More information about the cypherpunks mailing list