49bf92ba729a06aeebf74c450f90214087eba8396f2a5d76bd58014014aa7869

Analysis

max time kernel
147s
max time network
148s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
18-05-2024 19:39

Target

systemd-vir.vir
Size

8.7MB
MD5

c863369a6c1152dd9107143a5b7f1e5f
SHA1

1aa4259d8fbb4f9da335aa64e78f3cd9ca6cfaf6
SHA256

49bf92ba729a06aeebf74c450f90214087eba8396f2a5d76bd58014014aa7869
SHA512

c86d131ba1d65a04486ff1646862a265bf8cd7901f1ad6dfe43a7849ba6280a0240a00bafc87c95ec86717da7a797cb38ed2781a6eb1805ff79b603f5678db40
SSDEEP

98304:DL22hkaZrKBxNkP6WYrFjBL//xPLE0P5LOi99:/IaNKBxCP6WYrF9XKG

Score

3^/10

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	systemd-vir.vir

/tmp/systemd-vir.vir
/tmp/systemd-vir.vir
1⤵
- Enumerates kernel/hardware configuration
PID:1496

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact