Honeypot attack session (period 2021_2022), commands issued:
scp -t /tmp/5RcJ2tf9
cd /tmp && chmod +x 5RcJ2tf9 && bash -c ./5RcJ2tf9
./5RcJ2tf9

MITRE ATT&CK techniques observed:
T1105 Ingress Tool Transfer
T1083 File and Directory Discovery
T1222 File and Directory Permissions Modification
T1059 Command and Scripting Interpreter