Analysis
- max time kernel
0s - max time network
129s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
- submitted
27/07/2026, 12:22
General
- Target Havoc-main/payloads/DllLdr/Scripts/extract.py
- Size 1KB
- Sample260727-pkafcssala
- SHA256 e99fa09b0fc6681a0860a32ccb1fa2e86d46b0ca93cfca3f39293ee431975f10
Score
3/10
Malware Config
Signatures
- Command and Scripting Interpreter: Python 1 TTPs 4 IoCs
Execution via Python.
- System Network Configuration Discovery 1 TTPs 5 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/Havoc-main/payloads/DllLdr/Scripts/extract.py/tmp/Havoc-main/payloads/DllLdr/Scripts/extract.py1⤵
- System Network Configuration Discovery
-
/usr/local/sbin/python3python3 /tmp/Havoc-main/payloads/DllLdr/Scripts/extract.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
-
/usr/local/bin/python3python3 /tmp/Havoc-main/payloads/DllLdr/Scripts/extract.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
-
/usr/sbin/python3python3 /tmp/Havoc-main/payloads/DllLdr/Scripts/extract.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
-
/usr/bin/python3python3 /tmp/Havoc-main/payloads/DllLdr/Scripts/extract.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery