68a0d0d58bec7ef48a28af9e4fd5fe3b8a68f6e8e486628d1c1da022f1fb2cbf
UPX-packed MIPS botnet malware
Hostile packed IoT socket C2 botSectionless high-entropy MIPS ELF with sparse recovered code
SHA-25668a0d0d58bec7ef48a28af9e4fd5fe3b8a68f6e8e486628d1c1da022f1fb2cbf
MaleculeO₂(As₂C)H(Cm)Md₃(Bi₄BkHe)
Evidence
0x07f454c46010101000000000000000000.ELF............
0x100200080001000000700d420034000000........p.B.4...
0x2000000000071000003400200002002800........4. ...(.
0x3000000000010000000000000000004000..............@.
0x4000004000961702009617020005000000..@.............
0x5000000100010000000000000000004300..............C.
0x600000430000000000182f090006000000..C....../......
0x70000001008dc0e9b255505821300a0d1e........UPX!0...
0x8000000000000000000000000094000000................
0x905d000000020000007f3f64f97f454c46]........?d..ELF
⋯15 more rows
⋯3 more rows
0x19dfeff1f4f5354202f63646e2d6367692f37..OST /cdn-cgi/7
0x19e0e485454502f312e310d0a7a6fedff5573HTTP/1.1..zo..Us
0x19e1e65722d4167656e743a2d0e486f730897er-Agent:-.Hos..
⋯3 more rows
0x19e5eb638bd0bd4c4e428e524e3defeae5960.8.....(.$....Y`
0x19e6efc07736f636b65742079726f72bdc51e..socket yror...
0x19e7ef63b08706117926e6432ecf6ff9f1d20.;.pa..nd2.....
⋯7 more rows
0x19efebc9ddf639b7573076d6e74686f7d7ff6...c.us.mntho}..
0x19f0ed8bf2fcf005b636e635d072f3fb0cb82../..[cnc]./?...
0x19f1e0800010c25356875ed404338d629e69e....%5hu.@C8.)..
⋯15 more rows