1d99bafda6dd57a67a424eafdfb073ff516b6590cc6cee4a593a920580fdabf3

Analysis

max time kernel
147s
max time network
149s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
07/08/2026, 21:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
886eacad71f620b9eab5b40fd9bba8ec
Size 5.6MB
Sample260807-1dr8datflc
SHA256 1d99bafda6dd57a67a424eafdfb073ff516b6590cc6cee4a593a920580fdabf3
MD5 886eacad71f620b9eab5b40fd9bba8ec
SHA1 25bb29108dbf8c15658a1e7e0ae85307f024254d
SHA512 071665c47ff4637888007b10f028a73767d1f2cace2cf785be54094d15778d1206a147ab500e534860951d284d0c9c682adf9cf210ed0aaffd171a7fbb790ded
SSDEEP 49152:xmvlAzQDywbTOHg7ZIB7z9eeAz/m0T2b1JbKgeuVxQE1zbaLFFrPJ0qKlK1KcftM:xmdVDLQp1wPuSTfwfEU
TLSH
T1A5564953FCA915E5C1AED1318A729152BB317C496F3263D72F90F2282F72BD0A9B9344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 3 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	886eacad71f620b9eab5b40fd9bba8ec
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	886eacad71f620b9eab5b40fd9bba8ec
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_period_us	886eacad71f620b9eab5b40fd9bba8ec

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/cgroup	886eacad71f620b9eab5b40fd9bba8ec
File opened for reading	/proc/self/mountinfo	886eacad71f620b9eab5b40fd9bba8ec

/tmp/886eacad71f620b9eab5b40fd9bba8ec
/tmp/886eacad71f620b9eab5b40fd9bba8ec
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1490

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads