Analysis
- max time kernel
120s - max time network
130s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
20/07/2026, 12:24
Static task
static1
Behavioral task
behavioral1
Sample
cloudflared-linux-amd64
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
General
- Target cloudflared-linux-amd64
- Size 37.4MB
- Sample260720-pk4zzaas2l
- SHA256 ec905ea7b7e327ff8abdde8cb64697a2152de74dbcdbf6aec9db8364eb3886cd
- MD5 21024b63e7064ffeb8f5262e0ebb19f5
- SHA1 cbfb3919897941703f057813df04521f25d78d55
- SHA512 f73d8dd790826fe7b55660b8803baec8d2769725ca3497a228f32eb6808d3797ae49413f65acb7a270d5b5f56a1b190e92af1ad446bef00cd7e1b57b41d4c0f6
- SSDEEP 393216:Er/MbatPOUFL2lca5/cMQYHkW9LrBUvGeaRN78LK:ErOatp0DFrBUOeaRN8K
- TLSH T157877C83FC6505E5C6ED8530C5A246263B71BC45872473C72B61F6297F73BE8AABA340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates kernel/hardware configuration 1 TTPs 3 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_period_us cloudflared-linux-amd64 File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size cloudflared-linux-amd64 File opened for reading /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us cloudflared-linux-amd64 -
description ioc Process File opened for reading /proc/self/cgroup cloudflared-linux-amd64 File opened for reading /proc/self/mountinfo cloudflared-linux-amd64 File opened for reading /proc/stat cloudflared-linux-amd64
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /usr/local/etc/cloudflared/config.yml
- Size 35B
- SHA256 033d16c4a562a7b07835f8a1d1062b6952c12d3fc5859f4431a97cf367684279
- MD5 67a72852d586e3849fee3dc5aacd28a5
- SHA1 0c027fbda855c415c7e68785143382dd2465f9a4
- SHA512 00a02c5cc5b8c0f03274b84b14a477d238818333a64459433787de0f3dbdff064748e9e8089cc89092a2bc0fb2ae57f1d0f2884193c5897dceb90ba3e8d2e4f6
- MD5 SHA1 SHA512