403dafa88911d321d580b56e17fdd8ff641cde9d92665c6c0a2164be9c035579

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
16/05/2026, 06:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6c5a6e136d7f9fed75ae30da1de1fc2aca06435a147d2f42cdd4da12241b17a4.elf
Size 6.3MB
Sample260516-g11cqaev9j
SHA256 403dafa88911d321d580b56e17fdd8ff641cde9d92665c6c0a2164be9c035579
MD5 95bc548b10cb6c53475d1014befd20d5
SHA1 fdcaa68f26e54b0094160851a59f4c9dbd219665
SHA512 27ce56584f0f8c8882d59aca8743c6af41dcd6e256168ff4146698380b9a73a0cf113821db05bb16ff35fef578ddef50caecd0a1f922db26ee97404c46e6fe36
SSDEEP 49152:5/a9yUBw4lTtUmVYDP07d+z1CPtjN53V3C4j9T4xQFbAOcH3uHPhI5UH9/vP4Ovg:gyUBtdRCH3QPhI2BVY
TLSH
T1E5661990FECB04F6E9430D3144ABA26F23352D064B24EB83E6547F6AFD7B991197621C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
1468	6c5a6e136d7f9fed75ae30da1de1fc2aca06435a147d2f42cdd4da12241b17a4.elf

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	6c5a6e136d7f9fed75ae30da1de1fc2aca06435a147d2f42cdd4da12241b17a4.elf

/tmp/6c5a6e136d7f9fed75ae30da1de1fc2aca06435a147d2f42cdd4da12241b17a4.elf
/tmp/6c5a6e136d7f9fed75ae30da1de1fc2aca06435a147d2f42cdd4da12241b17a4.elf
1⤵
- Deletes itself
- Enumerates kernel/hardware configuration
PID:1468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads