Analysis

  • max time kernel
    146s
  • max time network
    129s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20260513-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    24/08/2026, 18:23

General

  • Target
    log
  • Size 9.0MB
  • Sample260824-w1f2eaef44
  • SHA256 12d754a8f7876a3fb2b563f7f333813e4d386e9287bdd5776a353ee53dbf7b4a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Creates/modifies Cron job 1 TTPs 1 IoCs

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/log
    /tmp/log
    1⤵
    • Creates/modifies Cron job
    • Reads runtime system information
    • Writes file to tmp directory
    PID:1490

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        0

        • Path /etc/cron.hourly/0
        • Size 92B
        • SHA256 982f9e0f089b91ba79df723435099df15c72e1201a45010ee60226ab136c93bf
        • MD5 SHA1 SHA512 TLSH

        filevnMuc0

        • Path /tmp/filevnMuc0
        • Size 9.0MB
        • SHA256 ce66c80a3b41b79b125bb590554a42a252824d9e94fa1dd1c06b119ed107a979
        • MD5 SHA1 SHA512 SSDEEP TLSH