19ead02ed32da37d04f3fb31de15a1f94160ccdf203630602cc433c53da58cdd

Analysis

max time kernel
13s
max time network
18s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
23/10/2026, 15:24

Target
riff-development/scripts/generate-spotify-api.sh
Size 1KB
Sample261023-ss2flact5w
SHA256 19ead02ed32da37d04f3fb31de15a1f94160ccdf203630602cc433c53da58cdd
MD5 681a0df28060bfde84483f98449efd59
SHA1 d800c9f14f1ef5c1c8252fc10341a5a45fcc6049
SHA512 3098f7772a689dedff64a2464cd14cd7a87e35369170cab1a999114b61b98e2c644f5c800ef7515341af76e8d7b328f66475f93efb489c1d8419b7802afbd1ff
TLSH
T1A23115917900D3F188752253AA80D0657132450B8E667C3735CAB9BBBAB7DC3F36D1A4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/sys/crypto/fips_enabled	curl

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/openapi-generator-cli-7.12.0.jar	curl

/tmp/riff-development/scripts/generate-spotify-api.sh
/tmp/riff-development/scripts/generate-spotify-api.sh
1⤵
PID:736

/usr/local/sbin/bash
bash /tmp/riff-development/scripts/generate-spotify-api.sh
1⤵
PID:736

/usr/local/bin/bash
bash /tmp/riff-development/scripts/generate-spotify-api.sh
1⤵
PID:736

/usr/sbin/bash
bash /tmp/riff-development/scripts/generate-spotify-api.sh
1⤵
PID:736

/usr/bin/bash
bash /tmp/riff-development/scripts/generate-spotify-api.sh
1⤵
PID:736

/sbin/bash
bash /tmp/riff-development/scripts/generate-spotify-api.sh
1⤵
PID:736

/bin/bash
bash /tmp/riff-development/scripts/generate-spotify-api.sh
1⤵
PID:736
- /usr/bin/dirname
  dirname /tmp/riff-development/scripts/generate-spotify-api.sh
  2⤵
  PID:744
- /usr/bin/curl
  curl -fSL -o /tmp/openapi-generator-cli-7.12.0.jar https://repo1.maven.org/maven2/org/openapitools/openapi-generator-cli/7.12.0/openapi-generator-cli-7.12.0.jar
  2⤵
  - Reads runtime system information
  - Writes file to tmp directory
  PID:746
- /bin/rm
  rm -rf generated/spotify-api
  2⤵
  PID:750

openapi-generator-cli-7.12.0.jar

Path /tmp/openapi-generator-cli-7.12.0.jar
Size 28.9MB
SHA256 33e7dfa7a1f04d58405ee12ae19e2c6fc2a91497cf2e56fa68f1875a95cbf220
MD5 40770e424b885e5878471d4a19ba951b
SHA1 2c7d5141384d2caaa2d11d370ed172525855c157
SHA512 f2dce3a4e7ca45c01e4f1216b0d9b66e4d7d724586762564216f5747bc30f2df636e1c68d988787b080650ac6ee4443dd67036c2b76cfbebb1cb54d7de135d3e
SSDEEP 393216:nENTrAoV528PD7aTnel8ZmYlLjYfEhHcjJZXpJeLoamQhUA6fr45kjaCXnNa7kSN:nEZN1PD7aSG/ifA0am2alXIjCshfZ
TLSH
T11767F10FBEC4E169FE17D4324051C097E42C5A98C046E05B9BE45A8A9CB9E894F47FEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download