2c5bd5604c7c3bc28307a6b2672af574fcb4040f65a95a178477272f55aee59b

Analysis

max time kernel
39s
max time network
31s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260127-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260127-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
06/05/2026, 03:34

Target
2c5bd5604c7c3bc28307a6b2672af574fcb4040f65a95a178477272f55aee59b.elf
Size 2.8MB
Sample260506-d47dnad16m
SHA256 2c5bd5604c7c3bc28307a6b2672af574fcb4040f65a95a178477272f55aee59b
MD5 f4396b2e8aad957f84c1f29b10c36337
SHA1 9dd6b79d9475fca9f4ffe3e1830665fc1ee95542
SHA512 0cf31b5a332316ec1396ca2f594d54036cf59866ba0d826c476223e1252136aa642554a54424e99c6c6840f4104105a17bb27a4aaabc21325db8a798aeeed05c
SSDEEP 49152:Ifpq/e5KbklGKg3t80LcVBAEHx7YPf7K0Xhz:V/e5q9yScVBAuYT1
TLSH
T125D56B11FDC704F6E4070A3209AB66AF23319C060F74EB97E944BB7DF97B6991836219
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	2c5bd5604c7c3bc28307a6b2672af574fcb4040f65a95a178477272f55aee59b.elf

/tmp/2c5bd5604c7c3bc28307a6b2672af574fcb4040f65a95a178477272f55aee59b.elf
/tmp/2c5bd5604c7c3bc28307a6b2672af574fcb4040f65a95a178477272f55aee59b.elf
1⤵
- Enumerates kernel/hardware configuration
PID:1507

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact