È«Ììºò¹¥»÷£ºÎïÁªÍø½©Ê¬ÍøÂçGorillaBot½ÒÃØ
°ä²¼¹¦·ò 2025-01-07µ¼Ó
8827Ì«Ñô¼¯ÍÅÓëÕÑͨ´óÑ§Íø°²Ñ§Ôº¼à²âµ½Ò»¸ö×Ô³ÆGorillaBotµÄÎïÁªÍø½©Ê¬ÍøÂç¡£¡£¡£¡£¡£¡£±¾ÎÄͨ¹ý¶Ô¸Ã½©Ê¬ÍøÂç½øÐÐÑù±¾¼¼Êõ·ÖÎö£¬£¬£¬£¬£¬£¬È«Ãæ½éÉÜÁËÆä¸ù»ùÐÅÏ¢¡¢¹¥»÷Ö¸±ê¡¢´«²¼·½Ê½µÈϸ½Ú£¬£¬£¬£¬£¬£¬ÒÔ×÷Ϊ¸÷ÐÐÒµ¼°ÓÐ¹ØÆóÒµÔì¶©ÍøÂ簲ȫսÊõµÄ²Î¿¼¡£¡£¡£¡£¡£¡£
2024Äê9Ô³õ£¬£¬£¬£¬£¬£¬8827Ì«Ñô¼¯ÍÅÔڲμӹú¶È³ÁµãÑз¢´òËãÏîÄ¿¡°´ó¹æÄ£Òì¹¹ÎïÁªÍøÍþв¿É¿Ø²¶»ñÓë·ÖÎö¼¼Êõ£¨2022YFB3104100£©¡±µÄ×êÑйý³ÌÖУ¬£¬£¬£¬£¬£¬¼à²âµ½ÁËÒ»¸ö×Ô³ÆGorillaBotµÄÎïÁªÍø½©Ê¬ÍøÂç¡£¡£¡£¡£¡£¡£
×Ô¾õÏÖÒÔÀ´£¬£¬£¬£¬£¬£¬GorillaBot½©Ê¬ÍøÂçÔÚÌáÒéÉ¢²¼Ê½»Ø¾ø·þÎñ£¨DDoS£©¹¥»÷·½Ãæ²û·¢³öÒì³£»£»£»£»£»£»£»£»îÔ¾µÄÌ¬ÊÆ¡£¡£¡£¡£¡£¡£Æ¾¾Ý¼à²âͳ¼Æ£¬£¬£¬£¬£¬£¬½ØÖÁ9Ôµף¬£¬£¬£¬£¬£¬¸Ã½©Ê¬ÍøÂçµÄºÅÁîÓë½ÚÔ죨C2£©·þÎñÆ÷ÒÑÏ·¢³¬¹ý30ÍòÌõ¹¥»÷Ö¸Áî¡£¡£¡£¡£¡£¡£´Ë±í£¬£¬£¬£¬£¬£¬GorillaBotËù·¢ÆðµÄDDoS¹¥»÷³öÏÖ³öÈ«Ììºò¡¢24Ó×ʱ²»¼ä¶ÏµÄÌØµã£¬£¬£¬£¬£¬£¬·ÖÆçÓÚһЩÓз¨¹æ×÷ϢģʽµÄ¹¥»÷ÐÐΪ£¬£¬£¬£¬£¬£¬Õâ´Î¹¥»÷ûÓвû·¢³öÈκÎÐÝÏ¢»ò¼õÈõµÄ¼£Ï󣬣¬£¬£¬£¬£¬ÏÔʾ³ö¹¥»÷ÕßÒâÔÚ³Ö¾Ãά³Ö¸ßÑ¹Ì¬ÊÆ£¬£¬£¬£¬£¬£¬¶ÔÖ¸±êÔì³É³ÖÐøÐÔµÄѹÁ¦ºÍÇÖº¦¡£¡£¡£¡£¡£¡£
¹¥»÷»î¶¯Ò»Ïò³ÖÐøµ½11ÔÂÏÂÑ®£¬£¬£¬£¬£¬£¬ÆÚ¼äÎÒÃǹ۲쵽C2·þÎñÆ÷µÄÊýÁ¿Öð²½Ï÷¼õ£¬£¬£¬£¬£¬£¬×îÖÕÏÂÏß¡£¡£¡£¡£¡£¡£È»¶ø£¬£¬£¬£¬£¬£¬µ½ÁË12Ô£¬£¬£¬£¬£¬£¬ÐµÄGorillaBotÑù±¾ÔٴγöÏÖ£¬£¬£¬£¬£¬£¬²¢Ñ¸ËÙ²¿ÊðÁËÒ»Ì×ȫеÄC2»ù´¡ÉèÊ©£¬£¬£¬£¬£¬£¬³Áи´Ô²¢Î¬³ÖÁ˸ßÇ¿¶ÈµÄÈ«Ììºò¹¥»÷Ì¬ÊÆ¡£¡£¡£¡£¡£¡£

¼¼Êõ·ÖÎö
1¡¢¸ù»ùÐÅÏ¢
GorillaBotͬÑù»ùÓÚMirai½øÐеĶþ´Î¿ª·¢¡£¡£¡£¡£¡£¡£ÔÚ9Ô·ݲ¶»ñµÄÑù±¾ÏÕЩÆëÈ«¸´ÓÃÁËMiraiµÄÔ´´úÂ룬£¬£¬£¬£¬£¬²¢ÔÚ´Ë»ù´¡ÉÏÒýÈëÁ˶àÖÖеÄDDoS¹¥»÷²½Ö裬£¬£¬£¬£¬£¬¼ÓÇ¿ÁËÆä¹¥»÷ÄÜÁ¦¡£¡£¡£¡£¡£¡£´Ó10ÔÂ·ÝÆðÍ·£¬£¬£¬£¬£¬£¬Æä´úÂëÆðÍ·½øÐÐÓÅ»¯µ÷Õû£¬£¬£¬£¬£¬£¬Ð°汾ÔÚͨѶºÍ̸ÖÐÒýÈëÁ˼ÓÃܼ°Ð£Ñé»úÔ죬£¬£¬£¬£¬£¬½øÒ»²½¼ÓÇ¿ÁËÆä¹¥»÷»î¶¯µÄÒñ±ÎÐԺͿ¹×ÌÈÅÄÜÁ¦£¬£¬£¬£¬£¬£¬²¢ÇÒÒ»Ïòά³Öµ½Á˴˿̡£¡£¡£¡£¡£¡£
ÔËÐк󣬣¬£¬£¬£¬£¬Ëü»áÔÚÆÁÄ»ÉÏ´òÓ¡×Ö·û´®¡°The Gorilla Botnet Cats Came After You!¡±£¬£¬£¬£¬£¬£¬ÕâÒ²ÊÇGorillaBotÃû³ÆµÄÓÉÀ´¡£¡£¡£¡£¡£¡£
GorillaBotÖÂÁ¦ÓÚ¶àÆ½Ì¨ÊÊÅ乤×÷£¬£¬£¬£¬£¬£¬Ö¼ÔÚÀ©´óÆäDZÔÚϰȾÁìÓò¡£¡£¡£¡£¡£¡£×Ô9Ô·ÝÒÔÀ´£¬£¬£¬£¬£¬£¬ËüÒѾ֧³ÖÁËÔ̺¬arm¡¢misp¡¢x86_64ÒÔ¼°x86ÔÚÄڵĶàÖÖCPU¼Ü¹¹¡£¡£¡£¡£¡£¡£Ëæ×Ű汾µü´ú£¬£¬£¬£¬£¬£¬ÔÚ10Ô·ÝÐÂÔöÁ˶Ômipsel¼Ü¹¹µÄÖ§³Ö£»£»£»£»£»£»£»£»µ½12Ô£¬£¬£¬£¬£¬£¬ÓÖ½øÒ»²½À©´óÖÁm68k¡¢sh4ºÍsparcµÈ¸ü¶àÑù»¯µÄ´¦ÖÃÆ÷ÀàÐÍ¡£¡£¡£¡£¡£¡£
2¡¢¹¥»÷Ö¸±ê
½ØÖ¹Ä¿Ç°£¬£¬£¬£¬£¬£¬GorillaBotµÄ¹¥»÷»î¶¯ÒѾ²¨¼°È«Çò³¬¹ý130¸ö¹ú¶ÈºÍµØÓò¡£¡£¡£¡£¡£¡£Æä¹¥»÷Ö¸±êÉæ¼°¸÷ÀàÐÐÒµÁìÓò£¬£¬£¬£¬£¬£¬Ô̺¬µ«²»ÏÞÓÚµçÐÅ¡¢ÔËÓªÉÌ¡¢ÒøÐÓ×¢ÔÆÍÆËãÊý¾ÝÖÐÐÄ¡¢ÓÎÏ·¡¢½ÌÓý¡¢µ±¾ÖÍøÕ¾¡¢²©²ÊµÈ¡£¡£¡£¡£¡£¡£ÓÈÆäÖµÍ×ÌùÐĵÄÊÇ£¬£¬£¬£¬£¬£¬ÖйúºÍÃÀ¹úÊÇÕâ´Î¹¥»÷»î¶¯Êܺ¦×îΪÑϳÁµÄÁ½¸ö¹ú¶È¡£¡£¡£¡£¡£¡£

¹úÄÚÓÐ4300¶à¸öÖ¸±êIP±»¹¥»÷£¬£¬£¬£¬£¬£¬º¸ÇÈ«¹úËùÓÐÊ¡¼¶ÐÐÕþÇø£¬£¬£¬£¬£¬£¬Ô̺¬¸Û°Ą̈¡£¡£¡£¡£¡£¡£´ÓµØÓòÉ¢²¼À´¿´£¬£¬£¬£¬£¬£¬Êܺ¦×îÑϳÁµÄµØÓòÊÇÏã¸Û¡¢Õ㽡¢¹ã¶«¡¢ºþ±±¡¢½ËÕµÈÊ¡·Ý¡£¡£¡£¡£¡£¡£

Áí±í£¬£¬£¬£¬£¬£¬´Ó¹¥»÷·½Ê½À´¿´£¬£¬£¬£¬£¬£¬GorillaBot¸üÆ«²îÓÚÌáÒéUDPºÍ̸µÄDDoS¹¥»÷£¬£¬£¬£¬£¬£¬Õ¼Õû¸ö¹¥»÷»î¶¯µÄ42%ÒÔÉÏ¡£¡£¡£¡£¡£¡£Ô̺¬udp_plain¡¢vse¡¢udp_discord¡¢udp_a2s¡¢udp_fivem¡¢udp_openvpn¡£¡£¡£¡£¡£¡£

3¡¢´«²¼·½Ê½
GorillaBotÖØÒªÊ¹ÓÃTelnetÈõ¿ÚÁî²Â½âµÄ·½Ê½À©É¢£¬£¬£¬£¬£¬£¬Í¨¹ýÄÚÖÃÓ²±àÂëµÄ96ÖÖ³£¼ûÈõ¿ÚÁî×éºÏ³¢ÊÔδ¾ÊÚȨ½Ó¼ûÉ豸¡£¡£¡£¡£¡£¡£
ÔÚ9Ô³õµÄÔçÆÚÑù±¾ÖУ¬£¬£¬£¬£¬£¬GorillaBotÔø¶ÌÔݵØÀûÓÃÁËHadoop Yarn RPCδÊÚȨ½Ó¼û·ì϶À´½øÐд«²¼£¬£¬£¬£¬£¬£¬Ëæºó¸üбãÒÆ³ýÁËÕë¶ÔHadoop·ì϶µÄÀûÓôúÂ룬£¬£¬£¬£¬£¬×îÖÕ½ö±£ÁôÁË»ùÓÚTelnetÈõ¿ÚÁÁ¦ÆÆ½âÕâÒ»µ¥Ò»¸ßЧµÄ´«Í³´«²¼¼¿Á©¡£¡£¡£¡£¡£¡£

ÐÐΪ·ÖÎö
1¡¢³õʼ»¯
ÔÚ2024Äê9ÔµÄÔçÆÚÑù±¾ÖУ¬£¬£¬£¬£¬£¬ÎÒÃÇ·¢ÏÖÁË´óÁ¿Óëµ÷ÊÔÆ÷¼ì²âÓйصÄ×Ö·û´®¡£¡£¡£¡£¡£¡£ÕâЩ×Ö·û´®µÄ´æÔÚÅú×¢¹¥»÷ÕßÓÐÒâͼµØÉè¼ÆÁ˸´ÔÓµÄÂß¼À´¼ø±ðÊÇ·ñ´æÔÚµ÷ÊÔ¹¤¾ßÔÚ¼à¿Ø»òÅú¸ÄÆäÐÐΪ¡£¡£¡£¡£¡£¡£ÒÔÏÂÊÇһЩÔÚÔçÆÚÑù±¾Öз¢ÏֵĵäÐ͵÷ÊÔÆ÷¼ì²â×Ö·û´®Ê¾Àý£º

µ«ÊÇ£¬£¬£¬£¬£¬£¬²¢Î´·¢ÏÖÕâЩ×Ö·û´®ÓÐÈκÎÏÖʵÒýÓ㬣¬£¬£¬£¬£¬Ò²Î´ÄÜÕÒµ½ÆäËü¼ì²âµ÷ÊÔÆ÷µÄ´úÂë¡£¡£¡£¡£¡£¡£ÕâÅú×¢¹ÌÈ»GorillaBotµÄ¿ª·¢ÕßËÆºõÓÐÒâͼ²ÎÓëµ÷ÊÔÆ÷¼ì²âÖ°ÄÜ£¬£¬£¬£¬£¬£¬µ«Ôڸð汾ÖÐÕâЩְÄÜ¿ÉÄÜ»¹Ã»ÓÐʵÏÖ¡£¡£¡£¡£¡£¡£
×Ô2024Äê10ÔÂÆð£¬£¬£¬£¬£¬£¬GorillaBotÑù±¾ÒýÈëÁËÏÖʵµÄµ÷ÊÔÆ÷¼ì²â»úÔì¡£¡£¡£¡£¡£¡£Ê×ÏÈͨ¹ý¼ì²â"/proc/self/status"ÎļþÖеÄ"TracerPid"×Ö¶ÎÀ´¼ì²âµ÷ÊÔÆ÷¡£¡£¡£¡£¡£¡£ÈôÊǼì²âµ½µ÷ÊÔÆ÷ÔòÁ¢¼´Í˳ö¹ý³Ì¡£¡£¡£¡£¡£¡£

¼Ì¶øÍ¨¹ý²é³Îļþ"/proc"ÎļþÊÇ·ñ´æÔÚ£¬£¬£¬£¬£¬£¬×÷ΪÅжϵ±Ç°»·¾³ÊÇ·ñΪÃÛ¹ÞµÄÆ¾¾Ý¡£¡£¡£¡£¡£¡£

Ëæºó²é³cgroupÐÅÏ¢ÖеÄÌØ¶¨×Ö·û´®À´ÅжÏÊÇ·ñÔËÐÐÔÚÈÝÆ÷»·¾³ÖУ¬£¬£¬£¬£¬£¬³ö¸ñÊDzéÕÒÔ̺¬"kubepods"µÄ×Ö·û´®¡£¡£¡£¡£¡£¡£

ΪÁËÈ·±£ÔÚϵͳ³ÁÆôºóÈÔÄÜÖ´ÐУ¬£¬£¬£¬£¬£¬GorillaBotѡȡÁË´´½¨ÏµÍ³·þÎñµÄ·½Ê½ÊµÏÖÓÆ¾Ã»¯¡£¡£¡£¡£¡£¡£¾ßÌåÀ´Ëµ£¬£¬£¬£¬£¬£¬Ëü»áÔÚ/etc/systemd/system/Ŀ¼Ï´´½¨Ò»¸öÃûΪcustom.serviceµÄ·þÎñÎļþ£¬£¬£¬£¬£¬£¬Ê¹Æä¿ÉÄÜÔÚϵͳÆô¶¯Ê±×Ô¶¯ÔËÐС£¡£¡£¡£¡£¡£

custom.service·þÎñµÄÖ÷ÌâÖ°ÄÜÊÇÏÂÔØÃûΪlol.shµÄ¾ç±¾µ½/tmp/Ŀ¼£¬£¬£¬£¬£¬£¬ÉèÖÃÖ´ÐÐȨÏÞ²¢Ö´ÐС£¡£¡£¡£¡£¡£ÏÂÔØÁ´½ÓÀ´×ÔÓ²±àÂëµÄ×Ö·û´®"kwws=22;:14531;7157:2oro1vk"£¬£¬£¬£¬£¬£¬Ë³´Î¼õÈ¥0x03¼´¿É½âÃܳöÏÂÔØÁ´½Ó¡£¡£¡£¡£¡£¡£

ΪÁ˽øÒ»²½È·±£ÆäÓÆ¾ÃÐÔ£¬£¬£¬£¬£¬£¬GorillaBot»¹»á¶Ô¹Ø¼üϵͳÅäÖÃÎļþ(/etc/inittab¡¢/etc/profile¡¢/boot/bootcmd)½øÐÐÅú¸ÄÔö³¤ºÅÁ£¬£¬£¬£¬£¬ÒÔʵ´Ë¿ÌϵͳµÄ·ÖÆçÆô¶¯½×¶Î×Ô¶¯ÏÂÔØ²¢Ö´ÐÐlol.sh¾ç±¾¡£¡£¡£¡£¡£¡£

ÔÚ/etc/init.d/Ŀ¼Ï´´½¨ÃûΪ"mybinary"»òÕß"system"µÄ¾ç±¾£¬£¬£¬£¬£¬£¬ÉèÖÃËüÔÚϵͳÆô¶¯Ê±Ö´ÐУ¬£¬£¬£¬£¬£¬È¥ÏÂÔØÏÂÔØÖ´ÐÐlol.sh¾ç±¾¡£¡£¡£¡£¡£¡£

´Ë±í£¬£¬£¬£¬£¬£¬GorillaBot»¹»á³¢ÊÔÔÚ/etc/rc.d/rc.local»ò/etc/rc.conf£¨ÈôÊDz»´æÔÚ£©ÖÐÔö³¤Ö¸Ïò"mybinary"»òÕß"system"µÄÈíÁ´½Ó£¬£¬£¬£¬£¬£¬ÒÔÈ·±£ÔÚϵͳÆô¶¯Ê±×Ô¶¯Ö´Ðиþ籾¡£¡£¡£¡£¡£¡£
ÕâÖֶ൵´Î¡¢¶àõè¾¶µÄÓÆ¾Ã»¯Õ½Êõ¼È·´Ó³ÁËGorillaBot¿ª·¢Õß¶Ôϵͳ»úÔìÓкÜÉî¿ÌµÄÀí½â£¬£¬£¬£¬£¬£¬Ò²½²ÁËÈ»ÖÂÁ¦Óڳ־ýÚÔìÊÜϰȾÕßµÄÉ豸¡£¡£¡£¡£¡£¡£
ÉÏÊö²½ÖèʵÏÖÖ®ºó£¬£¬£¬£¬£¬£¬Ôò½øÈëMiraiÀàÎïÁªÍø½©Ê¬ÍøÂç³£¼ûµÄÖ´ÐÐÁ÷³Ì£º¼àÌý38242¶Ë¿ÚÒÔʵÏÖµ¥Ò»¹ý³ÌÊ·ý¡¢¿ªÆôtelnetɨÃèµÈ£¬£¬£¬£¬£¬£¬ËæºóºÍC2³ÉÁ¢Í¨Ñ¶²¢ÆÚ´ýÖ´ÐÐC2Ï·¢µÄDDoSºÅÁî¡£¡£¡£¡£¡£¡£
2¡¢C2·þÎñÆ÷
9Ô·ݵÄGorillaBotÑù±¾Ó²±àÂë5¸öC2£¬£¬£¬£¬£¬£¬¼õÈ¥0x03¼´¿É½âÃÜ¡£¡£¡£¡£¡£¡£10ÔÂ·ÝÆð£¬£¬£¬£¬£¬£¬ÒýÈëÒ»¸ö¼«¶È¸´ÔӵļÓÃܺ¯Êýenc_switch£¬£¬£¬£¬£¬£¬ÓÃÀ´½âÃÜC2·þÎñÆ÷×Ö·û´®£¬£¬£¬£¬£¬£¬Ã¿¸öC2¶¼ÓÐÒ»¸öµÄÃÜÔ¿¡£¡£¡£¡£¡£¡£

Æäʵ10Ô·ÝÖ®ºóµÄÑù±¾£¬£¬£¬£¬£¬£¬C2ͨѶ¿ªÆô¼ÓÃÜÑéÖ¤£¬£¬£¬£¬£¬£¬¼ÓÃÜҲʹÓÃenc_switchº¯Êý¡£¡£¡£¡£¡£¡£ÏÔÈ»£¬£¬£¬£¬£¬£¬ÆäʵÏÖµÄÊÇijÖֶԳƼÓÃÜËã·¨¡£¡£¡£¡£¡£¡£12Ô·ݵÄÑù±¾Ö»ÓÐÒ»¸öÓ²±àÂëµÄÃ÷ÎÄC2·þÎñÆ÷£¬£¬£¬£¬£¬£¬²»ÔÙ¼ÓÃÜC2×Ö·û´®¡£¡£¡£¡£¡£¡£
3¡¢Í¨Ñ¶ºÍ̸
9Ô³õµÄÑù±¾ÆëÈ«¸´¿ÌÁËMiraiµÄͨѶºÍ̸£¬£¬£¬£¬£¬£¬Ô̺¬ÉÏÏßÊý¾Ý£¬£¬£¬£¬£¬£¬ÐÄÌø°üÒÔ¼°¹¥»÷ºÅÁîµÈ¸÷·½Ãæ¶¼ºÍMiraiûÓÐÈκÎÇø±ð¡£¡£¡£¡£¡£¡£10ÔÂ·ÝÆð£¬£¬£¬£¬£¬£¬Ñù±¾ÔÚ×ÜÌå±£ÁôMiraiͨѶºÍ̸µÄͬʱ£¬£¬£¬£¬£¬£¬Ð²ÎÓëÁ˼ÓÃܺÍУÑé»úÔì¡£¡£¡£¡£¡£¡£ÒÔÉÏÏßÊý¾ÝÓë¹¥»÷Ö¸ÁîΪÀý¡£¡£¡£¡£¡£¡£
3.1 ÉÏÏßÊý¾Ý

ÏνÓC2³É¹¦ºó£¬£¬£¬£¬£¬£¬Ê×ÏÈÏòC2·¢ËÍ1×Ö½ÚµÄ0x01¡£¡£¡£¡£¡£¡£C2ÏòBot·µ»Ø4×Ö½ÚµÄËæ»úÊý¾Ý£¬£¬£¬£¬£¬£¬±¾ÀýÊÇ"\x3f\xf3\x05\x62"¡£¡£¡£¡£¡£¡£GorillaBotͨ¹ý¶Ô³Æ¼ÓÃÜËã·¨£¬£¬£¬£¬£¬£¬¼ÓÃÜÉÏÊö4×Ö½ÚÊý¾Ý£¬£¬£¬£¬£¬£¬ÍÆËãÃÜÎĵÄSha256£¬£¬£¬£¬£¬£¬²¢·¢Ë͸øC2¡£¡£¡£¡£¡£¡£C2ÔÚÊÕµ½ÃÜÎĵÄSha256£¬£¬£¬£¬£¬£¬Ð£ÑéÎÞÎóÖ®ºó£¬£¬£¬£¬£¬£¬·µ»Ø1×Ö½ÚµÄ0x01×÷ΪÈÏ֤ͨ¹ýÊý¾Ý¡£¡£¡£¡£¡£¡£ËæºóGorillaBot·¢Ëͱ£ÁôµÄMiraiºÍ̸Êý¾Ý£¬£¬£¬£¬£¬£¬ÖÁ´ËÉÏÏ߳ɹ¦£¬£¬£¬£¬£¬£¬½øÈëÏ໥·¢ËÍÐÄÌø°üÒÔ¼°Ï·¢DDoSÖ¸Áî½×¶Î¡£¡£¡£¡£¡£¡£´ÓÉÏÏßµ½C2Ï·¢DDoS¹¥»÷Ö¸Á£¬£¬£¬£¬£¬Õû¸ö½»»¥Á÷³ÌÈçÏ£º

3.2 ¹¥»÷Ö¸Áî
×Ô9Ô·ݳöÏÖÒÁʼ£¬£¬£¬£¬£¬£¬GorillaBot¾Í½øÈëÒì³£»£»£»£»£»£»£»£»îÔ¾µÄ¹¥»÷½×¶Î¡£¡£¡£¡£¡£¡£C2ÿȫ¹ú·¢µÄDDoS¹¥»÷Ö¸ÁîÊýÁ¿¾ªÈË£¬£¬£¬£¬£¬£¬´ïµ½1ÍòÌõÉõÖÁ2ÍòÌõÒÔÉÏ¡£¡£¡£¡£¡£¡£¸üÖµÍ×ÌùÐĵÄÊÇ£¬£¬£¬£¬£¬£¬GorillaBotµÄ¹¥»÷ÊÇÈ«ÌìºòµÄ£¬£¬£¬£¬£¬£¬Ò»Ìì24Ó×ʱÄÚ¶¼ÔÚ²»¼ä¶ÏÏ·¢¹¥»÷Ö¸Á£¬£¬£¬£¬£¬Ã»ÓÐÈκÎÐÝÏ¢¼ä¶Ï¹¦·ò¡£¡£¡£¡£¡£¡£
GorillaBotµÄ¹¥»÷Ö¸ÁîÔØºÉÊý¾ÝʹÓð´×Ö½Ú¼Ó0x03µÄ·½Ê½¼ÓÃÜ£¬£¬£¬£¬£¬£¬¶Ô¼ÓÃܺóÊý¾ÝµÄÍÆËãSha256£¬£¬£¬£¬£¬£¬×÷ΪУÑéֵʹÓᣡ£¡£¡£¡£¡£


GorillaBotÔڽӹܵ½DDoS¹¥»÷Ö¸Áîºó£¬£¬£¬£¬£¬£¬ÏÈУÑé¹¥»÷Ö¸ÁîÔØºÉÊý¾ÝµÄSha256£¬£¬£¬£¬£¬£¬Ð£Ñéͨ¹ýÖ®ºó£¬£¬£¬£¬£¬£¬ÔÙ¼õÈ¥0x03½âÃÜ¡£¡£¡£¡£¡£¡£ËæºóŲÓÃattack_parseº¯ÊýÈ¥Ö´ÐС£¡£¡£¡£¡£¡£
ÒÔijDDoS¹¥»÷Ö¸ÁîΪÀý£º

ǰ2×Ö½ÚÊDZ¾Ö¡DDoS¹¥»÷Ö¸ÁîµÄÊý¾Ý³¤¶È¼õÈ¥2£¬£¬£¬£¬£¬£¬Ëæºó32×Ö½ÚÊÇDDoS¹¥»÷Ö¸ÁîÔØºÉÊý¾ÝµÄSha256УÑéÖµ¡£¡£¡£¡£¡£¡£ÉÏͼÂÌÉ«²¿ÃÅÊÇSha256УÑéÖµ£¬£¬£¬£¬£¬£¬´ÓÆ«ÒÆ34µ½½áβÊǵĺìÉ«²¿ÃÅÊÇÕæÕýµÄDDoS¹¥»÷Ö¸ÁîÔØºÉÊý¾Ý¡£¡£¡£¡£¡£¡£ÑéÖ¤ÈçÏ£º

DDoS¹¥»÷Ö¸ÁîÔØºÉÊý¾Ý¼õÈ¥0x03¼´¿É½âÃÜ£¬£¬£¬£¬£¬£¬ÈçÏ£º

½âÃܺóµÄDDoS¹¥»÷Ö¸ÁîÔØºÉÊý¾ÝºÍMiraiÆëȫһÖ¡£¡£¡£¡£¡£¡£ÊÂʵÉÏ£¬£¬£¬£¬£¬£¬×Ðϸ¹Û²ì»á·¢ÏÖ£¬£¬£¬£¬£¬£¬ÈôÊÇÈ¥µôSha256УÑéºÍ¼ÓÃÜ£¬£¬£¬£¬£¬£¬ËüÆëÈ«¾ÍÊÇMiraiµÄ¹¥»÷Ö¸ÁîÌåʽ¡£¡£¡£¡£¡£¡£ÉÏÊö¹¥»÷Ö¸Áî¼òÒªÃèÊöÈçÏ£º

Òò¶ø£¬£¬£¬£¬£¬£¬ÉÏÊöDDoS¹¥»÷Ö¸Áî¼´ÊÇÏòÖ¸¶¨Ö¸±ê159.xxx.xxx.29:80£¬£¬£¬£¬£¬£¬ÌáÒéattack_udp_vseÀàÐ͵Ĺ¥»÷£¬£¬£¬£¬£¬£¬³ÖÐø120ÃëÖÓ¡£¡£¡£¡£¡£¡£¹¥»÷Á÷Á¿ÈçÏ£º

Ŀǰ£¬£¬£¬£¬£¬£¬GorillaBotĿǰ¹²Ö§³Ö20¸ö DDoS¹¥»÷ÀàÐÍ£¬£¬£¬£¬£¬£¬ÈçÏ£º

×ܽá
½ØÖÁĿǰ£¬£¬£¬£¬£¬£¬GorillaBot½©Ê¬ÍøÂçÒÀÈ»´¦Óڸ߶ȻîԾ״̬£¬£¬£¬£¬£¬£¬Ã¿Ììͨ¹ýC2·þÎñÆ÷Ï·¢¿¿½üÒ»ÍòÌõ¹¥»÷Ö¸Á£¬£¬£¬£¬£¬¶ÔÈ«ÇòÁìÓòÄÚµÄÖ¸±êIPµØÖ·³ÖÐøÌáÒéÉ¢²¼Ê½»Ø¾ø·þÎñ£¨DDoS£©¹¥»÷£¬£¬£¬£¬£¬£¬Ó°ÏìÁË´Ó½ðÈÚµ½¹«¹²·þÎñµÈ¶à¸ö¹Ø¼üÐÐÒµ¡£¡£¡£¡£¡£¡£ËüÈ«Ììºò¡¢ÎÞ¼ä¶ÏµØ¶ÔÈ«Çò¸÷µØµÄÖ¸±ê½øÐй¥»÷£¬£¬£¬£¬£¬£¬²»½öƵÂʸ߲¢ÇÒ¸²¸Ç¿í·º£¬£¬£¬£¬£¬£¬ÒѾ³ÉΪµ±½ñ»¥ÁªÍø°²È«ÁìÓòµÄÒ»´óÍþв¡£¡£¡£¡£¡£¡£
´Ë±í£¬£¬£¬£¬£¬£¬GorillaBotÈÔÔÚ²»ÐݸüÐÂÆä´úÂë¿âÒÔά³Ö×îÐµĹ¥»÷ÄÜÁ¦¡£¡£¡£¡£¡£¡£Ö»¹ÜÕâЩ¸üдó¶à¼¯ÖÐÔÚÇá΢֮´¦£¬£¬£¬£¬£¬£¬²¢Î´³öÏÖ¸ïÃüÐԵı䶯£¬£¬£¬£¬£¬£¬ÎÒÃÇÈÔ»á³ÖÐø¸ú×ٹ۲죬£¬£¬£¬£¬£¬ÓÈÆäÊÇÆä¹¥»÷Ö¸±êµÄÑ¡ÔñÒÔ¼°¹¥»÷ÄÜÁ¦µÄ½ø»¯¡£¡£¡£¡£¡£¡£Í¬Ê±£¬£¬£¬£¬£¬£¬Ò²ÌáÐѸ÷»ú¹¹ºÍÓ×ÎÒÓû§¼ÓÇ¿¶ÔÍøÂ簲ȫ·À»¤´ëÊ©µÄÆ÷³Á£¬£¬£¬£¬£¬£¬Èçʵʱ¸üÐÂÈí¼þ²¹¶¡¡¢Ç¿»¯ÃÜÂëÖÎÀíµÈ£¬£¬£¬£¬£¬£¬ÒÔ½µµÍÔâ·ê¹¥»÷µÄ·çÏÕ¡£¡£¡£¡£¡£¡£
IOC
C2£º
LOL Download URL£º
SHA256£º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×¢£º


¾©¹«Íø°²±¸11010802024551ºÅ