2aa11ed98b93031e1aff86bb86d04a467ea6e83ff8e6d1d5df7f9db992758206

Analysis

max time kernel
149s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
17/05/2026, 00:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bot-amd64
Size 7.8MB
Sample260517-apllvsbs5z
SHA256 2aa11ed98b93031e1aff86bb86d04a467ea6e83ff8e6d1d5df7f9db992758206
MD5 c9104bd09aacb27fd935feb4278efdc7
SHA1 167ca8c9998d33c6e8a7dc023cc387eed58810c4
SHA512 494e3529532832e67556b92aa7fbbd6f707b2d6bef6ba43adfa6d4953df47c6008940155fa27f578699efb3f0cd71c520f35476cc64eaa3dbf2962913cefdc1a
SSDEEP 49152:f7NqB5LoMRIW0GYsk3YjKwOQaaG5OTogc4CtB9tWX7WSBniWc5EYY5iYwfssG8IM:D2+zshvG0TonY/OEYYfrMTqfa
TLSH
T1A3865C47F89115F9C5ADE63086629223BAB17C495B3123D72F90F3282F73BD06AB9750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	bot-amd64

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/stat	bot-amd64
File opened for reading	/proc/sys/net/core/somaxconn	bot-amd64

/tmp/bot-amd64
/tmp/bot-amd64
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1507

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads