Skip navigation.
Home

Lupper worm variant

(added some more info and disass - V.)

md5sum: 5b1176a690feaa128bc83ad278b19ba8 *linux_listen.bin
sha1sum: 454df00e2db034054ff2359d3e8c7113115fa1e3 linux_listen.bin
info: 443364 Dec 10 12:42 linux_listen.bin

This is one of the variants of the lupper worm, which exploited three different well known scripting injection vulnerabilities. This version copied itself via this website:
wget 24.224.174.18/listen

copies of the binary could be found in /tmp on infected hosts.

Thanks!

Just wanted to say thanks to chuck for being our first community submiter.

Rock!

V.

Thanks...

Thanks for the comment chuck. This is like making you first dollar at some business and posting it on the wall. :)