701e88ac1b2fec8d4e8f7517a0fc286ab5eaa00a6e07237c1ba17b124e3eee7f

Analysis

max time kernel
131s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20231221-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20231221-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
05-02-2024 09:21

Target

919e52383f1faf24fbe4186a3473ee3b
Size

8.7MB
MD5

919e52383f1faf24fbe4186a3473ee3b
SHA1

073f546df24cd18f97b68b119bbc21c27627bc23
SHA256

701e88ac1b2fec8d4e8f7517a0fc286ab5eaa00a6e07237c1ba17b124e3eee7f
SHA512

5af65f663971595b64a62758791f41baea292bcae905629d9a9563a6051a1e24e0c9dc625dcb12c53b90d9af99987ebf7b8339b730f0588bb372d6ae10520d40
SSDEEP

98304:OCCFnya2E/tEX2Ho6JBN+v7kKOBUtbv1QMPQX1w:OCCFnyaH/tEX2Ho6JBN47aBGbv5PQ

Score

3^/10

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	919e52383f1faf24fbe4186a3473ee3b

/tmp/919e52383f1faf24fbe4186a3473ee3b
/tmp/919e52383f1faf24fbe4186a3473ee3b
1⤵
- Enumerates kernel/hardware configuration
PID:1536

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact