Analysis
- max time kernel
0s - max time network
133s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
- submitted
05/07/2026, 18:11
General
- Target nuclei-templates-10.4.5/.github/scripts/enhance-cve-fields.py
- Size 3KB
- Sample260705-wsv6csav5k
- SHA256 42f2b7b6162446aeea0b63f488b91b19d9832d9a13fde138d22ebd8980980374
Score
3/10
Malware Config
Signatures
- Command and Scripting Interpreter: Python 1 TTPs 4 IoCs
Execution via Python.
- Command and Scripting Interpreter: Unix Shell 1 TTPs 1 IoCs
Execute scripts via Unix Shell.
- Reads runtime system information 3 IoCs
Reads data from /proc virtual filesystem.
- System Network Configuration Discovery 1 TTPs 5 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/nuclei-templates-10.4.5/.github/scripts/enhance-cve-fields.py/tmp/nuclei-templates-10.4.5/.github/scripts/enhance-cve-fields.py1⤵
- System Network Configuration Discovery
-
/usr/local/sbin/python3python3 /tmp/nuclei-templates-10.4.5/.github/scripts/enhance-cve-fields.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
-
/usr/local/bin/python3python3 /tmp/nuclei-templates-10.4.5/.github/scripts/enhance-cve-fields.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
-
/usr/sbin/python3python3 /tmp/nuclei-templates-10.4.5/.github/scripts/enhance-cve-fields.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
-
/usr/bin/python3python3 /tmp/nuclei-templates-10.4.5/.github/scripts/enhance-cve-fields.py1⤵
- Command and Scripting Interpreter: Python
- Reads runtime system information
- System Network Configuration Discovery
-
/sbin/ldconfig/sbin/ldconfig -p2⤵
-
-
/sbin/ldconfig.real/sbin/ldconfig.real -p2⤵
-
-
/bin/sh/bin/sh -c "uname -p 2> /dev/null"2⤵
- Command and Scripting Interpreter: Unix Shell
-
/bin/unameuname -p3⤵
-
-