3 ms·
I doubt it downloaded or executed anything, it probably just did a base64 decode using some tool and then analysed the decoded bash command which would be very
by mcintyre1994 1y ago
I doubt it downloaded or executed anything, it probably just did a base64 decode using some tool and then analysed the decoded bash command which would be very easy. Seems like a good use of an LLM to me.
- orbital-decay 1y agoIt can easily read base64 directly.
- bartjakobs 1y agoIt did have had the temp file name wrong
- ben-schaaf 1y agoOut of curiosity I asked chatgpt what the malware does, but erased some parts of the base64 encoded string. It still gave the same answer as the blog. I take that as a strong indication that this script is in its training set.