Honeypot attack session (period 2024), commands issued:
uname -a
hostname
uname -m&&pkill upnpsetup
chmod 777 zsvc
chmod 777 upnpsetup
sudo ./upnpsetup
./upnpsetup
sudo ./zsvc
./zsvc

MITRE ATT&CK techniques observed:
T1087 Account Discovery
T1082 System Information Discovery
T1489 Service Stop
T1222 File and Directory Permissions Modification
T1548 Abuse Elevation Control Mechanism