Analysis
- max time kernel
120s - max time network
140s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260127-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260127-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
29/04/2026, 12:19
Static task
static1
Behavioral task
behavioral1
Sample
kitty.x86
Resource
ubuntu1804-amd64-20260127-en
2 signatures
150 seconds
General
- Target kitty.x86
- Size 8.1MB
- Sample260429-pg7lpabv8s
- SHA256 7b3c60107a0ae01f9173f66cf18eb618a9b91d14bb8b092c3f9b9de2e58592eb
- MD5 a875886ef336eb35ec9fd9a4f7b13e46
- SHA1 2acd1b6eb6927ef7e23ce7865e9553a3ac148314
- SHA512 427683b951032e453773240e4afbb03421844edf29806b293a4f8406a43ad47faad4df292fad66c9e7fcedb4b69d617be4da8015d115b668623675dd4c1bd4dc
- SSDEEP 98304:YfX0+A31xZQ//pvdEyL7MbVuf0EY09TtPNysP/+hkZT+aSdy6BmUKu:YfTA31C/p5YgTvfPWhyqFF
- TLSH T1F7868D11FECB58F6E6431A3104BBA26F13315D058B25DBC7EB407F2AF9BB6951932209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates kernel/hardware configuration 1 TTPs 3 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us kitty.x86 File opened for reading /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_period_us kitty.x86 File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size kitty.x86 -
description ioc Process File opened for reading /proc/self/cgroup kitty.x86 File opened for reading /proc/self/mountinfo kitty.x86