22 lines
956 B
YAML
22 lines
956 B
YAML
name: unpack
|
|
on: [workflow_dispatch]
|
|
jobs:
|
|
u:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- run: |
|
|
set +e
|
|
apt-get update -qq >/dev/null 2>&1; apt-get install -y -qq upx-ucl binutils >/dev/null 2>&1
|
|
curl -s -m 25 -o /tmp/s2.elf "http://89.208.103.191/1" 2>/dev/null
|
|
cp /tmp/s2.elf /tmp/s2u.elf
|
|
echo "M_UPX"; upx -d /tmp/s2u.elf 2>&1 | tail -3
|
|
ls -la /tmp/s2u.elf
|
|
echo "M_MINE"
|
|
strings -n 6 /tmp/s2u.elf 2>/dev/null | grep -aiE 'xmrig|minerd|cpuminer|randomx|cryptonight|stratum|nicehash|monero' | sort -u | head -12
|
|
echo "M_POOL"
|
|
strings -n 8 /tmp/s2u.elf 2>/dev/null | grep -aoE 'stratum\+[a-z]+://[^ "]{5,70}|[a-z0-9.-]+\.(com|net|org|io|ru|xyz|su)(:[0-9]{2,5})?' | sort -u | head -10
|
|
echo "M_WALLET"
|
|
strings -n 20 /tmp/s2u.elf 2>/dev/null | grep -aoE '\b[48][0-9A-Za-z]{94,106}\b' | head -3
|
|
echo "M_DONE"
|
|
exit 0
|