Detected by avast as ELF:Hajime-I [Trj]

[polonus]

Re: https://www.virustotal.com/de/file/a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3/analysis/1558941529/
Abuse of host = https://www.shodan.io/host/78.163.25.47 not given here: https://www.abuseipdb.com/check/78.163.25.47
not here: https://www.virustotal.com/#/domain/78.163.25.47.dynamic.ttnet.com.tr
reported: https://urlhaus.abuse.ch/url/202620/
See: https://toolbar.netcraft.com/site_report?url=%0978.163.25.47.dynamic.ttnet.com.tr
Scan blocked as: shared hosting services at line provider: https://www.shodan.io/host/78.163.25.47

polonus