Second-stage payload delivery
Named by 2 kept items in this workspace.
Search every workspace for Second-stage payload delivery. It matches the name as written, so it can find other things that share it.
The items that name it 2
Dropper fetches a binary over HTTP, writes it to world-writable paths (/dev/shm, /tmp, /var/tmp), and establishes C2 communication.
After initial script ran, it pulled down a second payload, marked it executable, and launched it
All techniques in this workspace.