Hudak’s Honeypot (Part 2)

This is Part 2 in a series. Part 1 is here. During my triage I noticed a suspicious file /var/tmp/dk86. It’s a 64-bit Linux ELF executable, owned by user “daemon”, created 2021-11…