{"id":"4a9fd5957f757af5ba0e352469181907","title":"HTTP_Scanner_Bot — HTTP_Scanner_Bot · 木马/恶意软件 · ELF32","md5":"4a9fd5957f757af5ba0e352469181907","sha256":"75e5f2230261d98282372fc448e602161efed867c8917a634879a6d9ae71a25e","family":"HTTP_Scanner_Bot","apt":null,"verdict":null,"sample_type":"木马/恶意软件","lang":"C++","file_format":"ELF32","compiler":"GCC","published_at":"2026-08-07T16:00:00.000Z","summary":"该 ELF x86 样本为静态链接的 Linux 扫描/探测工具，疑似 IoT 僵尸网络组件：HTTP 多协议扫描：支持 GET/POST/PUT/DELETE/HEAD/OPTIONS/TRACE 全方法，探测 GraphQL、WebSocket (Socket.IO)、WordPress、REST API 端点DNS 解析器测试：枚举 25+ 公共 DNS 服务器 (Google/Cloudflare/OpenDNS/Quad9/Yandex/AliDNS)，用于测试 DNS 解析可用性SSH 指纹：包含 OpenSSH 8.9p1 版本字符串，可能用于 SSH 扫描","url":"https://zseceye.com/report/4a9fd5957f757af5ba0e352469181907","json_url":"https://zseceye.com/report/4a9fd5957f757af5ba0e352469181907.json","html_url":"https://zseceye.com/report/4a9fd5957f757af5ba0e352469181907","hash_urls":{"md5":"https://zseceye.com/hash/4a9fd5957f757af5ba0e352469181907","sha256":"https://zseceye.com/hash/75e5f2230261d98282372fc448e602161efed867c8917a634879a6d9ae71a25e"},"search_urls":{"md5":"https://zseceye.com/?q=4a9fd5957f757af5ba0e352469181907","sha256":"https://zseceye.com/?q=75e5f2230261d98282372fc448e602161efed867c8917a634879a6d9ae71a25e"},"sample_download_url":"https://zseceye.com/report/4a9fd5957f757af5ba0e352469181907/sample","sample_filename":"75e5f2230261d982.zip","iocs":[],"ips":[]}