{"id":"a19d933d23e188f44f87e6cfbc79754b","title":"Cross-Platform Botnet (Prometei?) — Cross-Platform Botnet (Prometei?) · 木马/恶意软件 · ELF64","md5":"a19d933d23e188f44f87e6cfbc79754b","sha256":"5c5575b228ce5c6f5cbe7dcdcde823a6ca926665f345adc585c8cd6df4f89ac0","family":"Cross-Platform Botnet (Prometei?)","apt":null,"verdict":null,"sample_type":"木马/恶意软件","lang":"C++","file_format":"ELF64","compiler":"GCC (x86-64)","published_at":"2026-08-09T16:00:00.000Z","summary":"该样本为跨平台僵尸网络客户端。使用 k.php 作为 C2 接口，支持 Linux (wget + upnpsetup) 和 Windows (powershell + cmd.exe) 双平台。包含 DNS 连通性检测 (8.8.8.8)、远程命令执行 (prometeicmd)、载荷更新下载等功能。疑似 Prometei 僵尸网络变种。","url":"https://zseceye.com/report/a19d933d23e188f44f87e6cfbc79754b","json_url":"https://zseceye.com/report/a19d933d23e188f44f87e6cfbc79754b.json","html_url":"https://zseceye.com/report/a19d933d23e188f44f87e6cfbc79754b","hash_urls":{"md5":"https://zseceye.com/hash/a19d933d23e188f44f87e6cfbc79754b","sha256":"https://zseceye.com/hash/5c5575b228ce5c6f5cbe7dcdcde823a6ca926665f345adc585c8cd6df4f89ac0"},"search_urls":{"md5":"https://zseceye.com/?q=a19d933d23e188f44f87e6cfbc79754b","sha256":"https://zseceye.com/?q=5c5575b228ce5c6f5cbe7dcdcde823a6ca926665f345adc585c8cd6df4f89ac0"},"sample_download_url":"https://zseceye.com/report/a19d933d23e188f44f87e6cfbc79754b/sample","sample_filename":"5c5575b228ce5c6f.zip","iocs":[],"ips":[]}