Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

scan: include match strings (truncated) #537

Merged
merged 1 commit into from
Oct 24, 2024

Conversation

tstromberg
Copy link
Collaborator

I missed having an idea what scan might have been finding, so I added the first 32 characters of the match string to the output:

🔎 Scanning "../bincapz-samples/linux/2024.Darkcracks/"
├─ 🚨 ../bincapz-samples/linux/2024.Darkcracks/darkcracks.sh
│  • combo/dropper/shell — change dir, fetch file, make it executable, and run it: ./agr, ./wdvsh agr, cd /mnt, cd…
│  • evasion/run_sleep_delete — run executable, sleep, and delete: ./wdvsh agr, chmod +x ./wdvsh, …
│  • net/fetch — Invokes curl to download a file from an IP: curl http://179.191.68.85:82/ve…
│  • process/chdir/unusual — changes directory to multiple unusual locations: cd /;, cd /mnt, cd /root, cd /t…

💡 For detailed analysis, try "mal analyze <path>"

@tstromberg tstromberg merged commit 1d2fe83 into chainguard-dev:main Oct 24, 2024
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants