Overview

overview

5

Static

static

5

claude-bug...ker.py

ubuntu-22.04-amd64

3

claude-bug...ker.py

debian-9-armhf

3

claude-bug...ker.py

debian-9-mips

3

claude-bug...ker.py

debian-9-mipsel

3

claude-bug...ner.py

ubuntu-22.04-amd64

3

claude-bug...ner.py

debian-9-armhf

3

claude-bug...ner.py

debian-9-mips

3

claude-bug...ner.py

debian-9-mipsel

3

claude-bug...xes.py

ubuntu-22.04-amd64

3

claude-bug...xes.py

debian-9-armhf

3

claude-bug...xes.py

debian-9-mips

3

claude-bug...xes.py

debian-9-mipsel

3

claude-bug...ner.sh

ubuntu-18.04-amd64

3

claude-bug...ner.sh

debian-9-armhf

3

claude-bug...ner.sh

debian-9-mips

3

claude-bug...ner.sh

debian-9-mipsel

3

claude-bug...ore.py

ubuntu-22.04-amd64

3

claude-bug...ore.py

debian-9-armhf

3

claude-bug...ore.py

debian-9-mips

3

claude-bug...ore.py

debian-9-mipsel

3

claude-bug...ner.py

ubuntu-18.04-amd64

3

claude-bug...ner.py

debian-9-armhf

3

claude-bug...ner.py

debian-9-mips

3

claude-bug...ner.py

debian-9-mipsel

3

claude-bug...dor.py

ubuntu-18.04-amd64

3

claude-bug...dor.py

debian-9-armhf

3

claude-bug...dor.py

debian-9-mips

3

claude-bug...dor.py

debian-9-mipsel

3

claude-bug...ter.py

ubuntu-18.04-amd64

3

claude-bug...ter.py

debian-9-armhf

3

claude-bug...ter.py

debian-9-mips

3

claude-bug...ter.py

debian-9-mipsel

3

Resubmissions

20/04/2026, 01:54

260420-cbn6yaft5m5

20/04/2026, 01:54

260420-cbhzxsft5k6

20/04/2026, 01:53

260420-ca3ypsft3r5

20/04/2026, 01:52

260420-catp2abt915

20/04/2026, 01:51

260420-b94hvabt9t5

Analysis

  • max time kernel
    1s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20260126-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20260126-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    20/04/2026, 01:52

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    claude-bug-bounty-main/tools/cicd_scanner.sh
  • Size 4KB
  • Sample260420-catp2abt91
  • SHA256 3dc2f6b3dc31149d0228bfe57475b046940d271e63aa0a44570cdb791854f67c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/claude-bug-bounty-main/tools/cicd_scanner.sh
    /tmp/claude-bug-bounty-main/tools/cicd_scanner.sh
    1⤵
    • Writes file to tmp directory
    PID:728
    • /usr/bin/basename
      basename /tmp/claude-bug-bounty-main/tools/cicd_scanner.sh
      2⤵
        PID:734
      • /usr/bin/basename
        basename /tmp/claude-bug-bounty-main/tools/cicd_scanner.sh
        2⤵
          PID:736
        • /usr/bin/basename
          basename /tmp/claude-bug-bounty-main/tools/cicd_scanner.sh
          2⤵
            PID:737
          • /usr/bin/basename
            basename /tmp/claude-bug-bounty-main/tools/cicd_scanner.sh
            2⤵
              PID:738
            • /bin/cat
              cat
              2⤵
                PID:733

            Network

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  sh-thd.UXQl4v
                  • Path /tmp/sh-thd.UXQl4v
                  • Size 712B
                  • SHA256 7cc813d5d2676d38ba11f29a27db559e6ffeb1f9a12b663fc3af7e160f1530c1
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download