Overview

overview

3

Static

static

1

antarctica

ubuntu-22.04-amd64

3

Resubmissions

17/04/2026, 04:15

260417-evf1saas513

17/04/2026, 04:05

260417-ent9tsez2j3

Analysis

  • user interaction
    yes
  • max time kernel
    0s
  • max time network
    0s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20260126-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20260126-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    17/04/2026, 04:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    antarctica
  • Size 2.5MB
  • Sample260417-evf1saas51
  • SHA256 fe684ef869da8d41b15d7cf7cc055d03f6a051dcd358ea583fefcf41816d5c0c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 2 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /usr/bin/bash
    bash -c "mount\${IFS}-t\${IFS}tmpfs\${IFS}tmpfs\${IFS}/sys/class/dmi/id&&echo\${IFS}Dell>/sys/class/dmi/id/sys_vendor&&echo\${IFS}Dell>/sys/class/dmi/id/bios_vendor&&echo\${IFS}Dell>/sys/class/dmi/id/chassis_vendor&&echo\${IFS}Dell>/sys/class/dmi/id/board_vendor&&:>/tmp/em&&mount\${IFS}--bind\${IFS}/tmp/em\${IFS}/proc/modules&&exec\${IFS}%PAYLOAD%"
    1⤵
    • Writes file to tmp directory
    PID:1573
    • /usr/bin/mount
      mount -t tmpfs tmpfs /sys/class/dmi/id
      2⤵
      • Reads runtime system information
      PID:1574
    • /usr/bin/mount
      mount --bind /tmp/em /proc/modules
      2⤵
      • Reads runtime system information
      PID:1575

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        sys_vendor
        • Path /sys/devices/virtual/dmi/id/sys_vendor
        • Size 5B
        • SHA256 9f3091d8a81f8803caac609567fae9277d00d56eb93f06c22a108b16e59de98a
        • MD5 SHA1 SHA512
        Submit Download