50fb2787dcde32055af61d60cbb3b9ed2294aacda1f0b099141d048e7b27c412

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
29/07/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
take_name.py
Size 1KB
Sample260729-ph2rtstfkh
SHA256 50fb2787dcde32055af61d60cbb3b9ed2294aacda1f0b099141d048e7b27c412
MD5 527acfcab64db47f5f49a4a5f28b2cad
SHA1 21e90bb75b04e34c6e8435269dd235d2217222b6
SHA512 19257def7aa3dd3ffe40530b0f23d51d9e7171b86b4ca48b8ca4690a312fac92e18fe37381523ac8a7ef088db12f97c4b87cd9d03f202373810ea01725832a0e
TLSH
T132313382ED602063C766C4A9D826F924F6266D571F2AF9707D9D46F03FCC5B2C8341EA
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: Python 1 TTPs 4 IoCs

Execution via Python.

execution

Python

T1059.006

pid	Process
1512	python3
1512	python3
1512	python3
1512	python3

/tmp/take_name.py
/tmp/take_name.py
1⤵
PID:1512

/usr/local/sbin/python3
python3 /tmp/take_name.py
1⤵
- Command and Scripting Interpreter: Python
PID:1512

/usr/local/bin/python3
python3 /tmp/take_name.py
1⤵
- Command and Scripting Interpreter: Python
PID:1512

/usr/sbin/python3
python3 /tmp/take_name.py
1⤵
- Command and Scripting Interpreter: Python
PID:1512

/usr/bin/python3
python3 /tmp/take_name.py
1⤵
- Command and Scripting Interpreter: Python
PID:1512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Python

T1059.006

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads