Hostile ^100% Download

DS.mips

Mirai botnet malware indicators

Source Engine query payloadXOR-decoded FTWDT101 watchdog path

SHA-2569edf6cbaba9ccd5c7b2665d708d85ce2035892723c3ec1b58a5c2862c846008a

URLhttps://mb-api.abuse.ch/api/v1/

MaleculeK(Mc)O₄(AsIDyP)H₃(F₈Cm₃Os)Md₃(Bi₃BkHe)

Evidence

Big-endian MIPS direct system-call instruction 0x220–0x4a0

⋯22 more rows
0x380144000083c1900410200202524050081.@..<..A.. %$...
0x39024060001000038252402108e0000000c$.....8%$.......
0x3a03c1900412739f7c004113d0524040006<..A'9....=.$...
0x3b08fbc00107c03e83b8e02000824738b70....|..;....$s.p
⋯15 more rows

Big-endian MIPS O32 direct kill syscall 0xfb84–0xfc54

⋯3 more rows
0xfbb403200008000000003c1c004a279c02a0. ......<..J'...
0xfbc424020fc50000000c14e0fff800000000$...............
0xfbd403e0000800000000000000003c1c004a............<..J
0xfbe427bdffe0279c02a0afbf001c10800009'...'...........
⋯7 more rows

Big-endian MIPS O32 direct write syscall 0x26e40–0x26f10

⋯3 more rows
0x26e707c03e83b8c628b701440000b3c190044|..;.b.p.@..<..D
0x26e8024020fa40000000c14e0002600000000$..........&....
0x26e908fbf002c8fb200288fb100248fb00020...,...(...$... 
0x26ea003e0000827bd00300080902527397350....'..0...%'9sP
⋯7 more rows

Big-endian MIPS O32 direct unlink syscall 0x27bd4–0x27ca4

⋯3 more rows
0x27c0403200008000000003c1c004a279c02a0. ......<..J'...
0x27c1424020faa0000000c14e0fff800000000$...............
0x27c2403e00008000000000000000024020fa6............$...
0x27c340000000c14e000033c1c004a03e00008........<..J....
⋯7 more rows

XOR-decoded FTWDT101 watchdog path 0x6bb87–0x6be77

⋯5 more rows
0x6bbd773747265737365727a6f6e652e636f6dstresserzone.com
0x6bbe70039312e39322e34302e313635000000.91.92.40.165...
0x6bbf700221b11201d1315161c1a1012171819.".. ...........
⋯4 more rows
0x6bc47dbd79bb4009bd1ccd1b40000009bd2d0................
0x6bc57b4000000009bd9d5c4c7b400009bc4c6................
0x6bc67dbd79bdad1c09bc0d7c4b400009bc7c0................
0x6bc77d5c0c1c7b4000000009ad5daddd9d1b4................
0x6bc87009bc4c6dbd79bdad1c09bc6dbc1c0d1................
0x6bc97b4000000009bc4c6dbd79bd7c4c1ddda................
0x6bca7d2dbb40000f6fbf3fbf9fde4e7b40000................
0x6bcb7009bd1c0d79bc6d79ad09bc6d79ad8db................
0x6bcc7d7d5d8b400d385d5d6d780d0d9db8781................
0x6bcd7dcdac486d8ddd184dfded2b4009bd0d1................
0x6bce7c29bc3d5c0d7dcd0dbd3b400009bd0d1................
0x6bcf7c29bd9ddc7d79bc3d5c0d7dcd0dbd3b4................
0x6bd07009bd0d1c29bf2e0e3f0e0858485ebc3................
0x6bd17d5c0d7dcd0dbd3b4009bd0d1c29bf2e0................
0x6bd27e3f0e0858485e894c3d5c0d7dcd0dbd3................
⋯5 more rows
0x6bd87d1d8d29bd1ccd1b400d0c2c6fcd1d8c4................
0x6bd97d1c6b40000e0e7dbc1c6d7d194f1dad3................
0x6bda7dddad194e5c1d1c6cdb40000009bd1c0................
0x6bdb7d79bc6d1c7dbd8c29ad7dbdad2b40000................
0x6bdc700dad5d9d1c7d1c6c2d1c6b40085d3d6................
⋯11 more rows