How to detect the t0rn rootkit – Includes detection methods, md5sums, pathnames, and TCP port numbers.
You can download it from the following link: https://packetstormsecurity.com/files/download/23755/t0rn.txt
Source: https://packetstormsecurity.com/files/23755/t0rn.txt.html