Analysis
- max time kernel
3s - max time network
132s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
- submitted
28/05/2026, 15:29
General
- Target Anthropic-Cybersecurity-Skills-main/skills/analyzing-apt-group-with-mitre-navigator/scripts/agent.py
- Size 8KB
- Sample260528-sw2krset7v
- SHA256 d714a27e4acb6bdaeacf4f5eaa4a905bba87f6f9e9d24813785821579d2fe4b9
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Command and Scripting Interpreter: Unix Shell 1 TTPs 1 IoCs
Execute scripts via Unix Shell.
- Reads runtime system information 3 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/Anthropic-Cybersecurity-Skills-main/skills/analyzing-apt-group-with-mitre-navigator/scripts/agent.py/tmp/Anthropic-Cybersecurity-Skills-main/skills/analyzing-apt-group-with-mitre-navigator/scripts/agent.py1⤵
-
/usr/local/sbin/python3python3 /tmp/Anthropic-Cybersecurity-Skills-main/skills/analyzing-apt-group-with-mitre-navigator/scripts/agent.py1⤵
-
/usr/local/bin/python3python3 /tmp/Anthropic-Cybersecurity-Skills-main/skills/analyzing-apt-group-with-mitre-navigator/scripts/agent.py1⤵
-
/usr/sbin/python3python3 /tmp/Anthropic-Cybersecurity-Skills-main/skills/analyzing-apt-group-with-mitre-navigator/scripts/agent.py1⤵
-
/usr/bin/python3python3 /tmp/Anthropic-Cybersecurity-Skills-main/skills/analyzing-apt-group-with-mitre-navigator/scripts/agent.py1⤵
- Reads runtime system information
-
/sbin/ldconfig/sbin/ldconfig -p2⤵
-
-
/sbin/ldconfig.real/sbin/ldconfig.real -p2⤵
-
-
/bin/sh/bin/sh -c "uname -p 2> /dev/null"2⤵
- Command and Scripting Interpreter: Unix Shell
-
/bin/unameuname -p3⤵
-
-