ShellShock Payload Sample Linux.Bashlet



Someone kindly shared their sample of the shellshock malware described by the Malware Must die group - you can read their analysis here:

File: fu4k_2485040231A35B7A465361FAF92A512D
Size: 152
MD5: 2485040231A35B7A465361FAF92A512


VIrustotal

SHA256: e74b2ed6b8b005d6c2eea4c761a2565cde9aab81d5005ed86f45ebf5089add81
File name: trzA114.tmp
Detection ratio: 22 / 55
Analysis date: 2014-10-02 05:12:29 UTC ( 6 hours, 50 minutes ago )
Antivirus Result Update
Ad-Aware Linux.Backdoor.H 20141002
Avast ELF:Shellshock-A [Expl] 20141002
Avira Linux/Small.152.A 20141002
BitDefender Linux.Backdoor.H 20141002
DrWeb Linux.BackDoor.Shellshock.2 20141002
ESET-NOD32 Linux/Agent.AB 20141002
Emsisoft Linux.Backdoor.H (B) 20141002
F-Secure Linux.Backdoor.H 20141001
Fortinet Linux/Small.CU!tr 20141002
GData Linux.Backdoor.H 20141002
Ikarus Backdoor.Linux.Small 20141002
K7AntiVirus Trojan ( 0001140e1 ) 20141001
K7GW Trojan ( 0001140e1 ) 20141001
Kaspersky Backdoor.Linux.Small.cu 20141001
MicroWorld-eScan Linux.Backdoor.H 20141002
Qihoo-360 Trojan.Generic 20141002
Sophos Linux/Bdoor-BGG 20141002
Symantec Linux.Bashlet 20141002
Tencent Win32.Trojan.Gen.Vdat 20141002
TrendMicro ELF_BASHLET.A 20141002
TrendMicro-HouseCall ELF_BASHLET.A 20141002
nProtect Linux.Backdoor.H 20141001
Related posts

Comments

Post a Comment

Popular posts from this blog

6352 hash passwords

gost-34-11-2012(yrs3683) gost-34-11-2012(yrsa8) gost-34-11-2012(YRsAg) gost-34-11-2012(yrsag0) gost-34-11-2012(yRSddu3) gost-34-11-2012(yrsdsjnz) gost-34-11-2012(YRSDXCWA) gost-34-11-2012(yRsErxL8) gost-34-11-2012(yrseyre64wstr) gost-34-11-2012(yrsgunaq) gost-34-11-2012(yr_silvertongued_devil_awaits) gost-34-11-2012(yRsmKoTZ) gost-34-11-2012(yrsmld) gost-34-11-2012(YRSMLD) gost-34-11-2012(YrSNhydv) gost-34-11-2012(yrsofgqp) gost-34-11-2012(yrsolownt) gost-34-11-2012(yrsra9im) gost-34-11-2012(y&rsummer10) gost-34-11-2012(yrsuodl) gost-34-11-2012(yrsw4ovo) gost-34-11-2012(yrsweeps) gost-34-11-2012(yrsxkng) gost-34-11-2012(yrt32nam) gost-34-11-2012(yRT3Gb4P) gost-34-11-2012(yrt53a1) gost-34-11-2012(yRT7kmes) gost-34-11-2012(Yrt84b91) gost-34-11-2012(yrtaev92) gost-34-11-2012(yrtano) gost-34-11-2012(yRtbpu) gost-34-11-2012(YRtbSf1975) gost-34-11-2012(yrtcaFrM) gost-34-11-2012(!yrtd3852) gost-34-11-2012(yrteop) gost-34-11-2012(yrtfewu) gost-34-11-201...
Read more

CIF / FOB ROTTERDAM, HOUSTON PORT and TTM

We LLC "BORKMOSKOE" are direct with the top world Refineries of petroleum supplier. At present we have products available for supply and export. We can supply the following on CIF / FOB ROTTERDAM, HOUSTON PORT and TTM. 1. Commodity: JP54 or JP A1 2. Commodity: Diesel GAS OIL D2 3. Commodity: Mazut M100 4. Commodity: D6 Virgin Fuel Oil 5. Commodity: Diesel EN590 10ppm / 50ppm 6. Commodity: Russian Export Blend Crude Oil (REBCO) / ESPO / LCO 7. Commodity: Diesel AGO 8. Commodity: Petcoke. We understand the need for safety and reliability, together with speed and flexibility to help our customers capitalize on opportunities. This makes us more than just a transaction facilitator. We are a critical link in a complex chain. Agents are also welcome to be our representatives and earn commission on any successful dealings. Kindly contact us for more about our services  program  and  features. Regards Alexander Vladimi...
Read more

You have {3} blocked messages on your server !!

You have new held messages Dear salimkopra6.david@blogger.com Incoming messages are blocked on your mail server. You have {6} blocked emails on your server waiting to deliver to   salimkopra6.david@blogger.com Enable data to retrieve messages Click Here To Enable Data © 2003 - 2021 WebClient Services Limited.
Read more