How to Analyse a Bash Script or System like what does they are creating

Hello, my client's servers are suffering from a malware script They ran a script and then their server is not working properly. I want to know how can I see that the script created which files, what the script changed in my server . I want to analyse that script so that i can fix the issue is there any method?