a1eeece2e90db3325f70acbced83e5a1b66f73b6b0f6141f04a47571fdf9b46e

Analysis

max time kernel
0s
max time network
13s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
27/08/2026, 05:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a1eeece2e90db3325f70acbced83e5a1b66f73b6b0f6141f04a47571fdf9b46e.elf
Size 35KB
Sample260827-gh4mesdn2x
SHA256 a1eeece2e90db3325f70acbced83e5a1b66f73b6b0f6141f04a47571fdf9b46e
MD5 ecf1f4d2bf18eeb41d03f010e59dca98
SHA1 bed7604e8dcfec0a32695cee8dd1a46cd45e4ca6
SHA512 4823af0465c18963cad3cdd3d1be9504696d2c570e83070923d514e819c36b1d3ef82c0e94da6e187bccde211140a1f7256794d4584be6ae2544e0c4d3714e86
SSDEEP 768:nm+OAknE3WJnCOmEvSXpnp0hKJ9OXKRPbncnUdpqrnbcuyD7UkWykkAJ:nzO7E3WJCOtvS5y6hjfqrnouy8kzkkc
TLSH
T1FAF2F2AE8197D609F47A617E1C5CBE54D4A08408F369FDD1C6F22A336DA37D03E289D2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

antivm discovery

Malware Config

Signatures

Traces itself 1 IoCs

Traces itself to prevent debugging attempts

pid	Process
1476	a1eeece2e90db3325f70acbced83e5a1b66f73b6b0f6141f04a47571fdf9b46e.elf

Checks hardware identifiers (DMI) 1 TTPs 1 IoCs

Checks DMI information which indicate if the system is a virtual machine.

antivm

System Checks

T1497.001

description	ioc	Process
File opened for reading	/sys/class/dmi/id/product_name	a1eeece2e90db3325f70acbced83e5a1b66f73b6b0f6141f04a47571fdf9b46e.elf

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/uptime	a1eeece2e90db3325f70acbced83e5a1b66f73b6b0f6141f04a47571fdf9b46e.elf

/tmp/a1eeece2e90db3325f70acbced83e5a1b66f73b6b0f6141f04a47571fdf9b46e.elf
/tmp/a1eeece2e90db3325f70acbced83e5a1b66f73b6b0f6141f04a47571fdf9b46e.elf
1⤵
- Traces itself
- Checks hardware identifiers (DMI)
- Reads runtime system information
PID:1476

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads