7f2a610efbb36dd84edcc01b0684475d060c048c1e7d949c16663e7f232db35d

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
17/08/2026, 03:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f64
Size 5.2MB
Sample260817-ej7pcsek5v
SHA256 7f2a610efbb36dd84edcc01b0684475d060c048c1e7d949c16663e7f232db35d
MD5 ec9a4a9883576a9451c1949ec631bcfa
SHA1 275eb906354a6943523cf48c08a89085ffcb1bf1
SHA512 0f0d024d0ebeaf348da5a426ff3bc64740c97a513555c6796c4c0073465aaa5a182adcd8e810d6f04368c4c5c1dc961e42fa54198394f5c2432b6d07c1dca991
SSDEEP 98304:Zfljp2w5Qw1V4KG0eUDDiWoYHcIUGKjT94Hy2k+2VlaBn:ZfljALMV4KsQRFHexE6Un
TLSH
T13E4633F55737C93335F8A3BD731207D6A3D56661C0CF67249BAC2A276B3B6941A8080B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	f64

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/exe	f64

/tmp/f64
/tmp/f64
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1474

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads