Analysis
- max time kernel
1s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
- submitted
27/07/2026, 12:22
General
- Target Havoc-main/payloads/Demon/scripts/hash_func.py
- Size 897B
- Sample260727-pkafcssala
- SHA256 ede73a0b3c3a552a203c0bca74f31e56f7bbb6054216124f484baf5909d3752a
Score
3/10
Malware Config
Signatures
- Command and Scripting Interpreter: Python 1 TTPs 4 IoCs
Execution via Python.
- System Network Configuration Discovery 1 TTPs 5 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/Havoc-main/payloads/Demon/scripts/hash_func.py/tmp/Havoc-main/payloads/Demon/scripts/hash_func.py1⤵
- System Network Configuration Discovery
-
/usr/local/sbin/python3python3 /tmp/Havoc-main/payloads/Demon/scripts/hash_func.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
-
/usr/local/bin/python3python3 /tmp/Havoc-main/payloads/Demon/scripts/hash_func.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
-
/usr/sbin/python3python3 /tmp/Havoc-main/payloads/Demon/scripts/hash_func.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery
-
/usr/bin/python3python3 /tmp/Havoc-main/payloads/Demon/scripts/hash_func.py1⤵
- Command and Scripting Interpreter: Python
- System Network Configuration Discovery