Benign Download

readme.html

Bot readme defines flood, scan and exec verbsBot readme defines flood, proxy and download verbs
SHA-2561e116abdc47d1c062bc17922358806652a28a715876e2e287cf4b7e7fb82b0b5
MaleculeO₂(CI)

Evidence

Bot readme lists a DDoS command lines 1–43
⋯11 lines
12!RAW &lt;text&gt;<br>
13!OPEN &lt;file&gt;<br>
14!EXEC &lt;command&gt; [parameters]<br>
15!DELETE &lt;file&gt;<br>
16!SPEEDTEST &lt;ftpurl&gt<br>
17!DOWNLOAD &lt;url&gt; &lt;dir&gt; [-r]<br>
18!UPDATE &lt;url&gt; [id]<br>
19!THRDLIST<br>
⋯4 lines
24!PSKILL &lt;process&gt;<br>
25!PSKILLPID &lt;pid&gt;<br>
26!SOCKS4START &lt;port&gt;<br>
27!SOCKS4STOP<br>
28!DDOSICMP &lt;host&gt; &lt;time&gt; [speed] [-f]<br>
29!DDOSUDP &lt;host&gt; &lt;port&gt; &lt;time&gt; [speed] [-f]<br>
30!DDOSSYN &lt;host&gt; &lt;port&gt; &lt;time&gt; [speed] [-f]<br>
31!DDOSSTOP<br>
32!SCANSTART &lt;port|exploit&gt; &lt;speed&gt; [-a|-b|-c|range] [-i]<br>
33!SCANSTOP<br>
34!SCANSTATS [amount]<br>
⋯9 lines

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.