14fed65b08229fa76aabaa69bb81fb3512b2e039fc1e6367b0ebc97eafd14ae3.sh

SHELL

SUSPICIOUS

Mal-ecule

Size 2.0 KB download

First seen 101 days ago

Analyzed 83 days ago

Objectives

command-and-control/dropper Reference to /tmp directory path

command-and-control/dropper/delivery chmod marks file executable

impact/wipe/disk Unmount command reference

supply-chain/install-hook/dropper Shell test writable command

fs/chmod/executable Dangerous chmod values (world-writable)

os/container Kubernetes hostPath volume spec

process/create Executes a file from current directory

process/create/script Executes a relative shell script path (.sh)

process/create/shell shell execution with -c flag

fs/path /tmp/ path component

os/console Combined stdout+stderr redirect to /dev/null

data/text/keywords Source or test deletion target

fs grep command keyword

process/daemonize Redirects output to /dev/null

lang shell code embedded in string

file/text File has 30 or more lines

SHA-256	14fed65b08229fa76aabaa69bb81fb3512b2e039fc1e6367b0ebc97eafd14ae3
Filename	14fed65b08229fa76aabaa69bb81fb3512b2e039fc1e6367b0ebc97eafd14ae3.sh

Source	harvest

Not seeing what you expected? Let us know