Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240729-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    02/09/2024, 15:13

General

  • Target
    OpenFeign-feign-5a43a23/scripts/release.sh
  • Size 1KB
  • Sample240902-sl6fzatglc
  • SHA256 13ab1772871b3b12830e9313f2879bbae2c13d0e46e4e9342166943b9a2b0c75
  • MD5 SHA1 SHA512
Score
3/10

Malware Config

Signatures

  • Reads runtime system information 2 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/OpenFeign-feign-5a43a23/scripts/release.sh
    /tmp/OpenFeign-feign-5a43a23/scripts/release.sh
    1⤵
      PID:666
    • /usr/local/sbin/bash
      bash /tmp/OpenFeign-feign-5a43a23/scripts/release.sh
      1⤵
        PID:666
      • /usr/local/bin/bash
        bash /tmp/OpenFeign-feign-5a43a23/scripts/release.sh
        1⤵
          PID:666
        • /usr/sbin/bash
          bash /tmp/OpenFeign-feign-5a43a23/scripts/release.sh
          1⤵
            PID:666
          • /usr/bin/bash
            bash /tmp/OpenFeign-feign-5a43a23/scripts/release.sh
            1⤵
              PID:666
            • /sbin/bash
              bash /tmp/OpenFeign-feign-5a43a23/scripts/release.sh
              1⤵
                PID:666
              • /bin/bash
                bash /tmp/OpenFeign-feign-5a43a23/scripts/release.sh
                1⤵
                  PID:666
                  • /tmp/OpenFeign-feign-5a43a23/scripts/mvnw
                    ./mvnw -B help:evaluate -N "-Dexpression=project.version"
                    2⤵
                      PID:671
                    • /bin/sed
                      sed -n "/^[0-9]/p"
                      2⤵
                      • Reads runtime system information
                      PID:672
                    • /usr/bin/cut
                      cut -d- -f 1
                      2⤵
                        PID:677
                      • /usr/bin/awk
                        awk -F. -v "OFS=." "NF==1{print ++\$NF}; NF>1{if(length(\$NF+1)>length(\$NF))\$(NF-1)++; \$NF=sprintf(\"%0*d\", length(\$NF), (\$NF+1)%(10^length(\$NF))); print}"
                        2⤵
                        • Reads runtime system information
                        PID:681
                      • /tmp/OpenFeign-feign-5a43a23/scripts/mvnw
                        ./mvnw -B versions:set license:format scm:checkin -DremoveSnapshot "-DgenerateBackupPoms=false" "-Dmessage=prepare release " "-DpushChanges=false"
                        2⤵
                          PID:683
                        • /tmp/OpenFeign-feign-5a43a23/scripts/mvnw
                          ./mvnw scm:tag
                          2⤵
                            PID:684
                          • /tmp/OpenFeign-feign-5a43a23/scripts/mvnw
                            ./mvnw -B versions:set scm:checkin "-DnewVersion=-SNAPSHOT" "-DgenerateBackupPoms=false" "-Dmessage=[ci skip] updating versions to next development iteration -SNAPSHOT"
                            2⤵
                              PID:685

                          Network

                                MITRE ATT&CK Matrix

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads