Components of the file and routine appear similar to those of a published entry, while our sample executed .x15cache, the bash script that downloads the malware.  Figure 1. Targeted machine using brute force via SSH The shell script downloads, extracts, and executes the miner payload.