19ead02ed32da37d04f3fb31de15a1f94160ccdf203630602cc433c53da58cdd

Analysis

max time kernel
2s
max time network
130s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
23/10/2026, 15:24

Target
riff-development/scripts/generate-spotify-api.sh
Size 1KB
Sample261023-ss2flact5w
SHA256 19ead02ed32da37d04f3fb31de15a1f94160ccdf203630602cc433c53da58cdd
MD5 681a0df28060bfde84483f98449efd59
SHA1 d800c9f14f1ef5c1c8252fc10341a5a45fcc6049
SHA512 3098f7772a689dedff64a2464cd14cd7a87e35369170cab1a999114b61b98e2c644f5c800ef7515341af76e8d7b328f66475f93efb489c1d8419b7802afbd1ff
TLSH
T1A23115917900D3F188752253AA80D0657132450B8E667C3735CAB9BBBAB7DC3F36D1A4
MD5 SHA1 SHA512 TLSH

Score

3^/10

Writes file to tmp directory 2 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/.38f22037752844d6	curl
File opened for modification	/tmp/openapi-generator-cli-7.12.0.jar	curl

/tmp/riff-development/scripts/generate-spotify-api.sh
/tmp/riff-development/scripts/generate-spotify-api.sh
1⤵
PID:1532

/usr/local/sbin/bash
bash /tmp/riff-development/scripts/generate-spotify-api.sh
1⤵
PID:1532

/usr/local/bin/bash
bash /tmp/riff-development/scripts/generate-spotify-api.sh
1⤵
PID:1532

/usr/sbin/bash
bash /tmp/riff-development/scripts/generate-spotify-api.sh
1⤵
PID:1532

/usr/bin/bash
bash /tmp/riff-development/scripts/generate-spotify-api.sh
1⤵
PID:1532

/sbin/bash
bash /tmp/riff-development/scripts/generate-spotify-api.sh
1⤵
PID:1532

/bin/bash
bash /tmp/riff-development/scripts/generate-spotify-api.sh
1⤵
PID:1532
- /usr/bin/dirname
  dirname /tmp/riff-development/scripts/generate-spotify-api.sh
  2⤵
  PID:1535
- /usr/bin/curl
  curl -fSL -o /tmp/openapi-generator-cli-7.12.0.jar https://repo1.maven.org/maven2/org/openapitools/openapi-generator-cli/7.12.0/openapi-generator-cli-7.12.0.jar
  2⤵
  - Writes file to tmp directory
  PID:1536
- /bin/rm
  rm -rf generated/spotify-api
  2⤵
  PID:1541

openapi-generator-cli-7.12.0.jar

Path /tmp/openapi-generator-cli-7.12.0.jar
Size 28.9MB
SHA256 33e7dfa7a1f04d58405ee12ae19e2c6fc2a91497cf2e56fa68f1875a95cbf220
MD5 40770e424b885e5878471d4a19ba951b
SHA1 2c7d5141384d2caaa2d11d370ed172525855c157
SHA512 f2dce3a4e7ca45c01e4f1216b0d9b66e4d7d724586762564216f5747bc30f2df636e1c68d988787b080650ac6ee4443dd67036c2b76cfbebb1cb54d7de135d3e
SSDEEP 393216:nENTrAoV528PD7aTnel8ZmYlLjYfEhHcjJZXpJeLoamQhUA6fr45kjaCXnNa7kSN:nEZN1PD7aSG/ifA0am2alXIjCshfZ
TLSH
T11767F10FBEC4E169FE17D4324051C097E42C5A98C046E05B9BE45A8A9CB9E894F47FEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download