a8608f71e175e5ea616b16fe13c2c31318027555e5129e12e3a0a86741be59e2

Analysis

max time kernel
0s
max time network
103s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
22-08-2022 20:04

Target

get
Size

1.8MB
MD5

6cdb4c03f3733d0a450fb4d2e38865cb
SHA1

141a2106d1a560b12f2d931720d811f83924e173
SHA256

a8608f71e175e5ea616b16fe13c2c31318027555e5129e12e3a0a86741be59e2
SHA512

03f19396a8744078f6d171fe5f0a587af6a11fbe828f45c823f4b0f5b539b60496711056fed30b6b31ba840b67e3038db9f445233f87a62dd37442cfe17a0a82

Score

5^/10

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery
T1082

Processes:

get

description ioc process

/sys/kernel/mm/transparent_hugepage/hpage_pmd_size /sys/kernel/mm/transparent_hugepage/hpage_pmd_size get
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

get

description ioc process

/proc/self/exe /proc/self/exe get

description	ioc	process
/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	get

description	ioc	process
/proc/self/exe	/proc/self/exe	get

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact