Benign Download

tp_argv0.sh

Shell exec takes argv zero from variableUses shell exec to replace process
SHA-25630f52bb9074fbec3eae18bae1e34e4f7967361d6f2e22d7f8809de56f6bc11bc
MaleculeO(Er)

Evidence

Shell exec takes argv zero from variable lines 1–2
1#!/bin/bash
2exec -a $PAYLOAD /tmp/x

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.