2bb502c569892bb3a352575ac654dde4e237bfbbcb8a9723438a73a95731824f

Analysis

user interaction
yes
max time kernel
0s
max time network
212s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20260126-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20260126-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
10/05/2026, 00:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
U.py
Size 5KB
Sample260510-a2173sat3j
SHA256 2bb502c569892bb3a352575ac654dde4e237bfbbcb8a9723438a73a95731824f
MD5 1fc61cad06d603e8f058049a84e5f1ae
SHA1 39787727069290bf7e5ddaa3dd3ef2cde646ebda
SHA512 a6a9c38947677c25fe34ebe40bf85d2f8a0d4a894ef91abd8daddfe7e81b1b493868f754686a1d11b93458c88d1c5d523cb83b2f7b7ecc5475bb9e72df703b9c
SSDEEP 96:UNZ9nqAAVGxAcL8qTPDa3qosXCql/tgDmoacSMEODTvXt4vWs+l4mvP7qvz3vM:K99vL8qva67vfgCHONbYk
TLSH
T14BC15523AE4A19338B57C0944852C6007BB9E4071B089831B6FDD36A3F44776DDFAA9F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: Python 1 TTPs 1 IoCs

Execution via Python.

execution

Python

T1059.006

pid	Process
1571	python3

/usr/bin/python3
python3 /tmp/U.py
1⤵
- Command and Scripting Interpreter: Python
PID:1571

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Python

T1059.006

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads