Hostile ^100% Download

Owari.sh4

Mirai botnet malware

Mirai SORA SPARC bot with VSE floodMirai SORA watchdog-backed VSE bot

SHA-25642e90cf83a3af621787b86630facda2aa96b750923fae7558a4b3c28febcc938

URLhttps://mb-api.abuse.ch/api/v1/

MaleculeK₂(Mc₂Te)O₃(As₂ILa)H₃(F₆Po₃Cm₃)Md₄(ArBi₃BkHe)

Evidence

SuperH machine field in ELF header 0x0–0x90

0x07f454c46010101000000000000000000.ELF............
0x1002002a0001000000a001400034000000..*[email protected]...
0x208cca0000090000003400200003002800........4. ...(.
⋯7 more rows

Single section dominates binary layout 0xa0–0x350

⋯3 more rows
0xd000000000000000000000000000000000................
0xe0862f962f11d9e62f9061224f1821168f././.../.a"O.!..
0xf0f36e0fd8826112622822088d04711228.n...a.b("...q.(
0x1000b420900826112622822f88f047109d1.B...a.b("...q..
0x1101821028908d40b41090001e11029e36f.!.....A.....).o
0x120264ff66ef669f6680b0009004cca4100&O.n.i.h....L.A.
0x130f4c8410000000000d8c8400009000900..A.......@.....
0x140e62f12d1224f1821048df36e10d411d5./.."O.!...n....
0x1500b41090010d44261182111890fd11821.A....Ba.!.....!
0x1600e89e36f264ff66e2b41090009000900...o&O.n+A......
0x17009000900090009000900090009000900................
0x180e36f264ff66e0b000900090000000000.o&O.n..........
0x190d8c8400050ca4100ecc8410000000000[email protected].....
0x1a000eef665f366662f462f07d0062f04d4...e.ff/F/.../..
0x1b004d706d10b41090005d12b4109000900.....A....+A....
0x1c0e050400094004000a0c34000d8b84000.P@...@...@...@.
0x1d070b34000000000000000000000000000p.@.............
0x1e04c6473601544158f6c66536104711061Lds`.D..lfSa.q.a
0x1f01c616031148d5362087206a000e30900.a`1..Sb.r......
0x20020611c6160310b8d0472017323654033 a.a`1...r.s#e@3
0x210f68f04720b0009000900090009000900...r............
0x22052600b00090009000900090009000900R`..............
0x23009000900090009000900090009000900................
0x240862f962f4369a62f5c6ab62f6c6bc62f././Ci./\j./lk./
0x250d62f736d224f2cd8f7510b481c6cff88./sm"O,..Q.H.l..
0x260018d15400c8b264ff66df66cf66bf66a...@..&O.m.l.k.j
0x270f669f6680b0009000900090009000900.i.h............
0x2800b480900ff880b8d0820198b1fd00b40.H....... .....@
0x29093641fd00b40090003641ed00b4009e5[email protected]...@..
0x2a01dd10b4100e409000900090009000900...A............
0x2b009000900090009000900090009000900................
0x2c016d110611c661546ea8f00e314d11267...a.f.F.......g
0x2d072620ba0236109000900090009000900rb..#a..........
0x2e06033dd8d336008407e02236104711061`3..3`.@~.#a.q.a
0x2f01c61a031f48f01732261b364d365f857.a.1...s"a.d.e.W
0x3000b41c366ccaf0900ac9e400044b64000[email protected].@.
0x3101c9f4000e89f4000d4b5400068ca4100..@...@[email protected].
0x3206cca4100090009000900090009000900l.A.............
0x33009000900090009000900090009000900................
0x340862f03e1962f1635a62f4368b62f5369./.../.5./Ch./Si
0x350c62fd62fe62f224f058fe87f53600488./././"O....S`..

Hardware watchdog device path 0xc35b–0xc64b

0xc35b0000000000862f09d8e62f8260224fff....../.../.`"O.
0xc36b88058df36e0b40fc788260ff88fa8be3[email protected].`.....
0xc37b6f264ff66ef6680b0009000900dcc841o&O.n.h........A
0xc38b00090009000900090009000900090009................
0xc39b0009000900c62fe62f224ff36e00a009.....././"O.n...
0xc3ab0001d102c723012a402c3dffffe36f26.....#.*@,=...o&
0xc3bb4ff66e0b00f66c09002f000000783939O.n...l../...x99
0xc3cb782e6475636b646e732e6f7267000000x.duckdns.org...
0xc3db0039342e32362e3130362e3332000000.94.26.106.32...
0xc3eb000a0000000000000100000000504d4d.............PMM
0xc3fb56000000005a411117131300000d0a00V....ZA.........
0xc40b00fffa1f00500018fff0000000fffb1f.....P..........
0xc41b002c6d6d2c7a3021373f303a277a3b26.,mm,z0!7?0:'z;&
0xc42b3354000000539b0000445200001b03153T...S...DR.....
0xc43b061d646d6566673d306d3d6566672c30..dmefg=0m=efg,0
0xc44b6d65665400273c313838540000313a35mefT.'<188T..1:5
0xc45b3638315400272d272031395400273c54681T.'-' 19T.'<T
0xc46b007b363d3a7b3621272d363b2c741b03.{6=:{6!'-6;,t..
0xc47b15061d54001b0315061d6e7435242438...T......nt5$$8
0xc48b3120743a3b2074323b213a30540000001 t:; t2;!:0T...
0xc49b003a373b2626313720540000007b363d.:7;&&17 T...{6=
0xc4ab3a7b3621272d363b2c74242754000000:{6!'-6;,t$'T...
0xc4bb007b363d3a7b3621272d363b2c743f3d.{6=:{6!'-6;,t?=
0xc4cb383874796d745400007b24263b377b5488tymtT..{$&;7{T
0xc4db007b312c31540000007b323054000000.{1,1T...{20T...
0xc4eb007b393524275400007b24263b377b3a.{95$'T..{$&;7{:
0xc4fb31207b2037245400007b2720352021271 { 7$T..{' 5 !'
0xc50b54000000007a353a3d393154007b2426T....z5:=91T.{$&
0xc51b3b377b3a31207b263b21203154000000;7{:1 {&;! 1T...
0xc52b00352727233b263054000000007b3120.5''#;&0T....{1 
0xc53b377b2631273b38227a373b3a325400007{&1';8"z7;:2T..
0xc54b003a3539312731262231267454000000.:591'1&"1&tT...
0xc55b007b3031227b233520373c303b335400.{01"{#5 7<0;3T.
0xc56b007b3031227b393d27377b233520373c.{01"{9='7{#5 7<
0xc57b303b335400243636322a3721450000000;3T.$662*7!E...
0xc58b003b333d3a54000000313a2031265400.;3=:T...1: 1&T.
0xc59b006d2165666760606c2165666035216c.m!efg``l!ef`5!l
0xc5ab656030602c6564540000073b21263731e`0`,edT...;!&71
0xc5bb74113a333d3a3174052131262d540000t.:3=:1t.!1&-T..
0xc5cb002f6465762f6e756c6c000000000000./dev/null......
0xc5db00000000000000000000000000000000................
0xc5eb00000000000000000000000000000000................
0xc5fb00000000000000000000000000000000................
⋯5 more rows