Analysis
- max time kernel
149s - max time network
151s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
11/08/2026, 12:27
General
- Target x-3.2-.sakura
- Size 94KB
- Sample260811-pmtl1sshke
- SHA256 61958a485732d3fb76ef286246047687239f374e873281dfdeddb1538a889958
- MD5 34618d30ce231a9c9e0bdd50ed3f9161
- SHA1 a94db9b25eb7337e759d81a4ef6353395b7d6f20
- SHA512 f80a8847f2294ed42ab34bff17b4d4b5298f2833ea36f73d7fb54c8d10283397597a7c7ed8a323a19c310d628e36f2f110966f5cefdbbaf214439a396a6b3aee
- SSDEEP 1536:MrOiwR1lgnK1qWuMOWJ+a5MZ/0uVMmebDqg1O6RxPmmq+P0Gz+JwLfvKm:MrURcKthOWJN5MRFeLbFBxPmmJP0Gz+y
- TLSH T1E0932B46F743C6B3C8431BB10297AA690931F97A0A2E9F4AF31D3CF4AB134D97116B56
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route x-3.2-.sakura - Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo x-3.2-.sakura - Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route x-3.2-.sakura