5e0b0a398ab427aa79b3dea99a9c23944a1ea8533e6d1dc42182d95bd5df075d

Analysis

max time kernel
5s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260127-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260127-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
01/05/2026, 00:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
RpcSecurity.x86_64
Size 57KB
Sample260501-ake9aaay81
SHA256 5e0b0a398ab427aa79b3dea99a9c23944a1ea8533e6d1dc42182d95bd5df075d
MD5 6a7a32cee9c2dcd46784a93edc339c0e
SHA1 b8e3645931cf1ec6440ebbacc68c92e066ec7951
SHA512 7ccd4460420e0e035dca11377d03e286155f7e964abb76b8a707f08c30952a27a9337609b9c13213e057331afa63ef662e17a96f216df172cbea5e0599b5cc7d
SSDEEP 1536:1XIY73si3qEToSRhINcQ/K6C8u50pfEHwNLT:2Y7H6ETRhIV/Kn5qEHw1T
TLSH
T12A431917F94685FDC089C234177EBA3AE92331FE1229B26A67D4FB263DC6D611E09D04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Enumerates active TCP sockets 1 TTPs 1 IoCs

Gets active TCP sockets from /proc virtual filesystem.

discovery

System Network Connections Discovery

T1049

description	ioc	Process
File opened for reading	/proc/net/tcp	RpcSecurity.x86_64

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/tcp	RpcSecurity.x86_64

/tmp/RpcSecurity.x86_64
/tmp/RpcSecurity.x86_64
1⤵
- Enumerates active TCP sockets
- Reads system network configuration
PID:1568

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Network Connections Discovery

T1049

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads