797ef16ddd023778515b4ec360a8307991667738523bc1a5595f2abb7750bbf7

Analysis

max time kernel
0s
max time network
385s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20260513-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
15/08/2026, 04:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
txt pcap.js
Size 33KB
Sample260815-e1ls8ayfma
SHA256 797ef16ddd023778515b4ec360a8307991667738523bc1a5595f2abb7750bbf7
MD5 dd6dbfb7733352324d20fa7c0283b4f6
SHA1 3dd7048645ef73efa309a00a2b69592c85a8d648
SHA512 5f6a34c68ee45835e565282bbc9438b6917666f52e90eab6c9e769438d65b5ed530ddb7cfa9590adac6b135c96a2b4b909ece8d91f1e064c398883b688a2278b
SSDEEP 384:9jcI4kJvhPRRhqLdyh0fVn3K348ENVbRxcjkvEy:TvhP3adyef9LfVbTokvt
TLSH
T1E9F29B9D468404DD399EF7E958C08EBEF30EDFB61731E86B2072C0D6D3BA729A545848
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 2 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/memory.max	node
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/memory.high	node

Reads runtime system information 3 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/meminfo	node
File opened for reading	/proc/self/maps	node
File opened for reading	/proc/self/cgroup	node

/usr/bin/node
node "/tmp/txt pcap.js"
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1609

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads