Analysis
- max time kernel
1s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
- submitted
27/07/2026, 12:22
General
- Target Havoc-main/payloads/Shellcode/Scripts/extract.py
- Size 882B
- Sample260727-pkafcssala
- SHA256 64f8dca4328cbed486ee330d7693ad97a7d7fa6221308fc95d8f84dd7f9099d9
Score
3/10
Malware Config
Signatures
- Command and Scripting Interpreter: Python 1 TTPs 4 IoCs
Execution via Python.
- System Network Configuration Discovery 1 TTPs 5 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/Havoc-main/payloads/Shellcode/Scripts/extract.py/tmp/Havoc-main/payloads/Shellcode/Scripts/extract.py1⤵
- System Network Configuration Discovery
-
/usr/local/sbin/python3python3 /tmp/Havoc-main/payloads/Shellcode/Scripts/extract.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
-
/usr/local/bin/python3python3 /tmp/Havoc-main/payloads/Shellcode/Scripts/extract.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
-
/usr/sbin/python3python3 /tmp/Havoc-main/payloads/Shellcode/Scripts/extract.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
-
/usr/bin/python3python3 /tmp/Havoc-main/payloads/Shellcode/Scripts/extract.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery