[unixfreaxjp]

IptabLes|x botnet CNC in WinPE, served IptabLes|x ELF malware bot clients
For many good details as reference, is written in http://blog.malwaremustdie.org/2015/07/ ... shock.html

Thanks to benkow (credit) to helpo on "xxxx" THIS on CNC while I was deep in analysis.
MD5 (Control.exe) = "315d102f1f6b3c6298f6df31daf03dcd"
No client ELF shared here. Reason: has risk of Infected w/ELF Viruses, grab the md5 of them in analysis above but test risk are your own. rgds #MalwareMustDie

[fade]

Where did you come across the controller?

[unixfreaxjp]

Where did you come across the controller?

Who are you, again?