Lupper worm variant
(added some more info and disass - V.)
md5sum: 5b1176a690feaa128bc83ad278b19ba8 *linux_listen.bin
sha1sum: 454df00e2db034054ff2359d3e8c7113115fa1e3 linux_listen.bin
info: 443364 Dec 10 12:42 linux_listen.bin
This is one of the variants of the lupper worm, which exploited three different well known scripting injection vulnerabilities. This version copied itself via this website:
copies of the binary could be found in /tmp on infected hosts.