76d102ffed833f2770a543e78b94afa58065fb48da67df9ad7db1b7ed23dce9a

Analysis

max time kernel
126s
max time network
135s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20230621-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20230621-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
25/08/2023, 05:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

linux_http_x86
Size

14.2MB
MD5

a0141c1e004588ba461a1215616fa6c9
SHA1

80015676cd70ca53742cecd2201917e849607cc5
SHA256

76d102ffed833f2770a543e78b94afa58065fb48da67df9ad7db1b7ed23dce9a
SHA512

3491f95b45794a5cb652afabb6d76e7b877ebec98e26479d497be74f9be456599af5ed0c92f6bbcdefdafdb49766b7dcba98fc902791db540da92bc4a0e55738
SSDEEP

196608:ujzKfWafoesdg1HwePsjTMHeLwYxRci/9s4:rRs61HjPQ1wYxRvs

Score

3^/10

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	linux_http_x86

/tmp/linux_http_x86
/tmp/linux_http_x86
1⤵
- Enumerates kernel/hardware configuration
PID:589

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...