Hostile ^100% Download

DS.spc

Mirai botnet campaign seed

Source Engine query payloadXOR-decoded FTWDT101 watchdog path

SHA-2560f964ceb3217c34186feb523a19edf102947066479f4c5e0c3b96c709c373da4

URLhttps://mb-api.abuse.ch/api/v1/

MaleculeK(Mc)O₄(AsIDyP)H₂(F₈Cm₂)Md₃(Bi₃BkHe)

Evidence

Pinned external IPv4 host literal in binary 0x712c7–0x713e7

⋯5 more rows
0x7131773747265737365727a6f6e652e636f6dstresserzone.com
0x713270039312e39322e34302e313635000000.91.92.40.165...
0x713370000000000000000000000000000107b...............{
⋯11 more rows

XOR-decoded FTWDT101 watchdog path 0x71420–0x71690

⋯3 more rows
0x714509bd2d0b4000000009bd9d5c4c7b40000................
0x714609bc4c6dbd79bdad1c09bc0d7c4b40000................
0x714709bc7c0d5c0c1c7b40000000000000000................
0x714809ad5daddd9d1b4009bc4c6dbd79bdad1................
0x71490c09bc6dbc1c0d1b40000000000000000................
0x714a09bc4c6dbd79bd7c4c1dddad2dbb40000................
0x714b0f6fbf3fbf9fde4e7b400000000000000................
0x714c09bd1c0d79bc6d79ad09bc6d79ad8dbd7................
0x714d0d5d8b40000000000d385d5d6d780d0d9................
0x714e0db8781dcdac486d8ddd184dfded2b400................
0x714f09bd0d1c29bc3d5c0d7dcd0dbd3b40000................
0x715009bd0d1c29bd9ddc7d79bc3d5c0d7dcd0................
0x71510dbd3b400000000009bd0d1c29bf2e0e3................
0x71520f0e0858485ebc3d5c0d7dcd0dbd3b400................
0x715309bd0d1c29bf2e0e3f0e0858485e894c3................
⋯7 more rows
0x715b0d0c2c6fcd1d8c4d1c6b4000000000000................
0x715c0e0e7dbc1c6d7d194f1dad3dddad194e5................
0x715d0c1d1c6cdb40000009bd1c0d79bc6d1c7................
0x715e0dbd8c29ad7dbdad2b400000000000000................
0x715f0dad5d9d1c7d1c6c2d1c6b40000000000................
⋯10 more rows

References /proc/cpuinfo system information path 0x73458–0x73518

⋯3 more rows
0x734882a6370203c3d202a7265000000000000*cp <= *re......
0x734982f70726f632f637075696e666f000000/proc/cpuinfo...
0x734a86e637075732070726f626564203a2025ncpus probed : %
⋯7 more rows

glibc tunables environment marker 0x73548–0x73628

⋯3 more rows
0x735782f6574632f737569642d646562756700/etc/suid-debug.
0x73588474c4942435f54554e41424c45530000GLIBC_TUNABLES..
0x735987362726b2829206661696c7572652077sbrk() failure w
⋯9 more rows

Get kernel version /proc/sys/kernel/osrelease 0x73c08–0x73d98

⋯14 more rows
0x73ce8696e666f0000000073657475705f7664info....setup_vd
0x73cf8736f0000000000002f70726f632f7379so....../proc/sy
0x73d08732f6b65726e656c2f6f7372656c6561s/kernel/osrelea
0x73d1873650000000000002c00000000000000se......,.......
0x73d2849474e4f5245000067636f6e762e6300IGNORE..gconv.c.
⋯7 more rows