Resubmissions

10/07/2026, 18:08

260710-wq2v5agy5w3

10/07/2026, 18:06

260710-wp4ckaes3p6

Analysis

  • user interaction
    yes
  • max time kernel
    0s
  • max time network
    303s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20260126-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20260126-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    10/07/2026, 18:06

General

  • Target
    CMCLIENT-Linux-1.5.9.appimage
  • Size 100.9MB
  • Sample260710-wp4ckaes3p
  • SHA256 f150213e9f1eeb6eafeb0cc50ba6c73666e61f1f16c518ec698120ee989363b1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/CMCLIENT-Linux-1.5.9.appimage
    /tmp/CMCLIENT-Linux-1.5.9.appimage
    1⤵
    • Reads runtime system information
    PID:2033

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads