Analysis
- geolocation tags
- user interaction
yes - max time kernel
110s - max time network
897s - platform
ubuntu-22.04_amd64 - resource
ubuntu2204-amd64-20260513-es - resource tags
- submitted
18/07/2026, 20:03
General
- Target cfst
- Size 7.6MB
- Sample260718-yspppabw5k
- SHA256 2d0b1f831eea02ea2eb98d1cecbe9d8d631a72f19c46b23bb0457cb12f75e556
Score
9/10
Malware Config
Signatures
- Contacts a large (11880) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
- Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
- Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/cfst/tmp/cfst1⤵
- Enumerates kernel/hardware configuration
- Writes file to tmp directory
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
result.csv