Analysis

  • max time kernel
    120s
  • max time network
    130s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20260513-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    20/07/2026, 12:24

General

  • Target
    cloudflared-linux-amd64
  • Size 37.4MB
  • Sample260720-pk4zzaas2l
  • SHA256 ec905ea7b7e327ff8abdde8cb64697a2152de74dbcdbf6aec9db8364eb3886cd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Enumerates kernel/hardware configuration 1 TTPs 3 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 3 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/cloudflared-linux-amd64
    /tmp/cloudflared-linux-amd64
    1⤵
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:1474
    • /usr/bin/getent
      getent passwd 0
      2⤵
        PID:1483

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          config.yml

          • Path /usr/local/etc/cloudflared/config.yml
          • Size 35B
          • SHA256 033d16c4a562a7b07835f8a1d1062b6952c12d3fc5859f4431a97cf367684279
          • MD5 SHA1 SHA512