Tengu, a Mirai-style Linux and IoT botnet

I reversed Tengu, a Mirai-style Linux and IoT botnet sample. The binary hides as a kernel worker, installs several forms of persistence, decodes a hidden C2 address, and includes UDP flooding, SSH handshake, HTTP flooding, and proxy capabilities. The post is interactive. Click any address to inspect the evidence directly in Ghidra: submitted by...