Benign Download

Backdoor.Linux.CGI.b

Imports C popen command-pipe APINo RELRO (GOT writable after load)
SHA-256089dc254bdf1abd15cad536e71ea40b269cc4abecdf78eb54c4b2fbf950b29b2
MaleculeH(Po)Md(He)

Evidence

Imports C popen command-pipe API 0x231–0x2f1
⋯3 more rows
0x261676574656e760070636c6f7365006d61getenv.pclose.ma
0x2716c6c6f6300706f70656e005f5f646572lloc.popen.__der
0x281656769737465725f6672616d655f696eegister_frame_in
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.