Benign Download

Net-Worm.Linux.Millen

Imports POSIX socket creation APINo RELRO (GOT writable after load)
SHA-25629346df3e4877532c5786742d4389b4a7ff2c0ab7462238289c73e4e9bfff263
MaleculeH(Cm₄)Md(He)

Evidence

Converts host to network short 0x348–0x4b8
⋯9 more rows
0x3d86974007072696e746600737472737472it.printf.strstr
0x3e80062636f707900616c61726d0068746f.bcopy.alarm.hto
0x3f86e73005f656e7669726f6e0072656164ns._environ.read
0x40800777269746500736f636b657400636f.write.socket.co
0x4186e6e65637400696e65745f6e746f6100nnect.inet_ntoa.
0x428676574686f737462796e616d6500696egethostbyname.in
0x43865745f61646472005f5f656e7669726fet_addr.__enviro
0x4486e00656e7669726f6e005f7374617274n.environ._start
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.