afd61882c4f23a1a2a46719c2f50bcaf543bb7030c8551f9a81cab605b399a05

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
22/08/2026, 23:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
afd61882c4f23a1a2a46719c2f50bcaf543bb7030c8551f9a81cab605b399a05
Size 34KB
Sample260822-3m2vaavyes
SHA256 afd61882c4f23a1a2a46719c2f50bcaf543bb7030c8551f9a81cab605b399a05
MD5 33523c6cf087daec086b3ba2f0a19145
SHA1 7a2ba6f84cbbe057c38a0052fd2daeac0cec648f
SHA512 3d335e4d4131e4ec819bc7936f016aabb954d4e71e2283b356b76f447b876f397e491fb106e7566943bcb2557a73c05f459d16404a02b4405e79520177bdde7c
SSDEEP 768:2U8Z5U5n9DW/OBB6gRFraJQ1gBatFk4Svo0fCCWjIP+M5hMT+nbcuyD7UkWykkAv:L8Z5+lFrTgBaM4SJfCNjIP/W+nouy8kW
TLSH
T1DCF2F2A888E71705D6FFC0729CE9F53E61F4CA2C60C4C573CBE561679612F64260A68F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

antivm discovery

Malware Config

Signatures

Traces itself 1 IoCs

Traces itself to prevent debugging attempts

pid	Process
1480	afd61882c4f23a1a2a46719c2f50bcaf543bb7030c8551f9a81cab605b399a05

Checks hardware identifiers (DMI) 1 TTPs 1 IoCs

Checks DMI information which indicate if the system is a virtual machine.

antivm

System Checks

T1497.001

description	ioc	Process
File opened for reading	/sys/class/dmi/id/product_name	afd61882c4f23a1a2a46719c2f50bcaf543bb7030c8551f9a81cab605b399a05

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/uptime	afd61882c4f23a1a2a46719c2f50bcaf543bb7030c8551f9a81cab605b399a05

/tmp/afd61882c4f23a1a2a46719c2f50bcaf543bb7030c8551f9a81cab605b399a05
/tmp/afd61882c4f23a1a2a46719c2f50bcaf543bb7030c8551f9a81cab605b399a05
1⤵
- Traces itself
- Checks hardware identifiers (DMI)
- Reads runtime system information
PID:1480

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads