An Analysis of Shell Shock Malware

The 89.238.150.154:5 connection was a CnC server where it could get a new payload or get commands to carry out DDoS attacks. It was dead in hours.