Saturday, September 9, 2017

Analysis of recent linux malware:

Today we received a linux malware sample for analysis.
MD5: 26413FD652A4ABB3FCA4A936DE6A4736

remnux@remnux:~/Downloads$ file ntpd
ntpd: ELF 32-bit MSB  executable, MIPS, MIPS-I version 1 (SYSV), statically linked, not stripped

This sample appears to be attacking bot. Let's look at the strings:






IOC details
  • hxxp://majestic12(.)co(.)uk/bot.php
  • hxxp://89.38.96(.)67/tftp
  • 89.38.96(.)67
  • hxxp://94.177.172(.)221/John.sh
  • 94.177.172(.)221





Post made by

26 comments:

Anonymous said...

Terrific post but I was wanting to know if you could write a litte more on this
subject? I'd be very grateful if you could elaborate a little bit more.
Bless you!

newworld said...

Thanks for your comment.
Sure, we started concentrating on linux malware files nowadays.
Please watch this space and share this link with others.

by
newWorld

Kale Co Jakim said...

Hi, Great.. Tutorial is just awesome..It is really helpful for a newbie like me.. I am a regular follower of your blog. Really very informative post you shared here. Kindly keep blogging. If anyone wants to become a .Net developer learn from .Net Core Training in Chennai. or learn thru .Net Core Training in Chennai. Nowadays Dot Net has tons of job opportunities on various vertical industry.
or Es6 Training in Chennai. Nowadays JavaScript has tons of job opportunities on various vertical industry.

Unknown said...

Thanks a lot very much for the high quality and results-oriented help. I won’t think twice to endorse your blog post to anybody who wants and needs support about this area.
java training in bangalore
java training in bangalore

jeeva said...

Thanks for the informative article. This is one of the best resources I have found in quite some time. Nicely written and great info. I really cannot thank you enough for sharing
microsoft azure training in bangalore
rpa training in bangalore
best rpa training in bangalore
rpa online training

Jaweed Khan said...

Thanks For Sharing the Information The Information Shared Is very valuable Please Keep Updating us Time Just Went On Reading The article Python Online training Hadoop Online training Data Science Online training AWS Online training

Prwatech said...

I Got Job in my dream company with decent 12 Lacks Per Annum salary, I have learned this world most demanding course out there in the current IT Market from the data science course in puneProviders who helped me a lot to achieve my dreams comes true. Really worth trying instant approval blog commenting sites

Training for IT and Software Courses said...

Wow it is really wonderful and awesome thus it is veWow, it is really wonderful and awesome thus it is very much useful for me to understand many concepts and helped me a lot.

oracle dba training in bangalore

oracle dba courses in bangalore

oracle dba classes in bangalore

oracle dba training institute in bangalore

oracle dba course syllabus

best oracle dba training

oracle dba training centers

Training for IT and Software Courses said...

This is the exact information I am been searching for, Thanks for sharing the required infos with the clear update and required points. To appreciate this I like to share some useful information.

perl training institutes in bangalore

perl training in bangalore

best perl training institutes in bangalore

perl training course content

perl training interview questions

perl training & placement in bangalore

perl training center in bangalore

Training for IT and Software Courses said...

It is very good and useful for students and developer.Learned a lot of new things from your post Good creation,thanks for give a good information at sap crm.

mysql dba training in bangalore

mysql dba courses in bangalore

mysql dba classes in bangalore

mysql dba training institute in bangalore

mysql dba course syllabus

best mysql dba training

mysql dba training centers

Training for IT and Software Courses said...

I have to voice my passion for your kindness giving support to those people that should have guidance on this important matter.

pega training institutes in bangalore

pega training in bangalore

best pega training institutes in bangalore

pega training course content

pega training interview questions

pega training & placement in bangalore

pega training center in bangalore

Training for IT and Software Courses said...

Excellent post for the people who really need information for this technology.

sql server dba training in bangalore

sql server dba courses in bangalore

sql server dba classes in bangalore

sql server dba training institute in bangalore

sql server dba course syllabus

best sql server dba training

sql server dba course syllabus

best sql server dba training

sql server dba training centers

svrtechnologies said...

Thanks for Posting such an useful info...

aws tutorial

Padminiprwatech said...

Thanks for sharing your innovative ideas to our vision. I have read your blog and I gathered some new information through your blog. Your blog is really very informative and unique. Keep posting like this. Awaiting for your further update.If you are looking for any Hadoop related information, please visit our website Hadoop training institute in bangalore

svrtechnologies said...

Thanks for sharing such a great information..Its really nice and informative..

learn data science

Jayalakshmi said...

I can only express a word of thanks! Nothing else. Because your topic is nice, you can add knowledge. Thank you very much for sharing this information.
web designing training in chennai

web designing training in tambaram

digital marketing training in chennai

digital marketing training in tambaram

rpa training in chennai

rpa training in tambaram

tally training in chennai

tally training in tambaram

deiva said...

Wow it is really wonderful and awesome thus it is veWow, it is really wonderful and awesome thus it is very much useful for me to understand many concepts and helped me a lot...
java training in chennai

java training in omr

aws training in chennai

aws training in omr

python training in chennai

python training in omr

selenium training in chennai

selenium training in omr

praveen said...

Really nice post and good job,
Thanks to share with us,

java training in chennai

java training in porur

aws training in chennai

aws training in porur

python training in chennai

python training in porur

selenium training in chennai

selenium training in porur

shiny said...

Thank you for this great article....
data science training in chennai

data science training in annanagar

android training in chennai

android training in annanagar

devops training in chennai

devops training in annanagar

artificial intelligence training in chennai

artificial intelligence training in annanagar

jeni said...

Excellent Blog! I would like to thank for the efforts you have made in writing this post. I am hoping the same best work from you in the future as well. I wanted to thank you for this websites!
angular js training in chennai

angular js training in velachery

full stack training in chennai

full stack training in velachery

php training in chennai

php training in velachery

photoshop training in chennai

photoshop training in velachery

Unknown said...

Thanks for Sharing This Article.It is very so much valuable content. I hope these Commenting lists will help to my website
workday studio online training
best workday studio online training
top workday studio online training


vivekvedha said...

It is very good and useful for students and developer.Learned a lot of new things from your post .
acte chennai

acte complaints

acte reviews

acte trainer complaints

acte trainer reviews

acte velachery reviews complaints

acte tambaram reviews complaints

acte anna nagar reviews complaints

acte porur reviews complaints

acte omr reviews complaints

Vinay kumar said...

This was nice and amazing and the given contents were very useful and the precision has given here is good.

Apache Spark Training in Pune
Spark Training Institute in Pune

Technogeekscs said...

I am really happy with your blog because your article is very unique and powerful for new.
Data Science
Selenium
ETL Testing
AWS
Python Online Classes

seoprofessional said...

Nice blog. Go for salesforce online course

Peter Johnson said...
This comment has been removed by a blog administrator.

Process and Thread:

A process is a program or application that is currently running on a computer. It is an instance of a program that is being executed by the ...