Analysis
- max time kernel
0s - max time network
288s - platform
ubuntu-22.04_amd64 - resource
ubuntu2204-amd64-20260127-en - resource tags
arch:amd64arch:i386image:ubuntu2204-amd64-20260127-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system - submitted
22/07/2026, 02:11
Static task
static1
Behavioral task
behavioral1
Sample
police atuali.json.js
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
police atuali.json.js
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
police atuali.json.js
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
police atuali.json.js
Resource
ubuntu2204-amd64-20260127-en
Behavioral task
behavioral5
Sample
police atuali.json.js
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral6
Sample
police atuali.json.js
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral7
Sample
police atuali.json.js
Resource
debian9-mipsel-20260513-en
General
- Target police atuali.json.js
- Size 3KB
- Sample260722-cmrffatzas
- SHA256 9a25780400eeb8f2357754515ddd3d665efdb79493ba7f2844d32001432550a0
- MD5 a17b48539097422e99ba637e0fbef015
- SHA1 75c0f8da6af80bb83484b9bfdd7a614bb5d537b9
- SHA512 139e478b17bc76e2d3e5b4a33d4706d227c3c554cc30b6fb73286d13cb37fc770d28ec3ef953b5df146676bf84effb22ee317197302e8183e2a407baa6a3c217
- MD5 SHA1 SHA512
Malware Config
Signatures
- Enumerates kernel/hardware configuration 1 TTPs 2 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/cgroup/system.slice/agent.service/memory.max node File opened for reading /sys/fs/cgroup/system.slice/agent.service/memory.high node -
description ioc Process File opened for reading /proc/self/cgroup node File opened for reading /proc/meminfo node File opened for reading /proc/self/maps node