30160bb71f989ac3e9d7bc84972213fe3fca6242e603cb158abe0e1a9db35a3d

Analysis

max time kernel
0s
max time network
130s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
30/08/2026, 06:46

Target
tmpddepvnk1.elf
Size 6.2MB
Sample260830-hjtpaaae95
SHA256 30160bb71f989ac3e9d7bc84972213fe3fca6242e603cb158abe0e1a9db35a3d
MD5 c45e2b7dae7d664c7fb4a4a2310ac679
SHA1 5d46ca696a8cc0e36d74b311987e17b7cb11a5b7
SHA512 bfab69d21200378db91b7857735e4b57b8b6da15baea459aae1dc9fa1e1efa6bbc43e15dc5d497bb05ee2bf58db899d00a31d5efe80034c2075be5ce42fa600f
SSDEEP 49152:5uQzTs5Fpprb/T4vO90d7HjmAFd4A64nsfJuPvVfTOpdfEwmeCOkHRDKgF57u0To:rVaEE1crFZNATE1hiXpAdIf
TLSH
T187664B43F85191E8C1EDD230C6669293BA707C894B3123D32F60FBB92B76BD46A79354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	tmpddepvnk1.elf

/tmp/tmpddepvnk1.elf
/tmp/tmpddepvnk1.elf
1⤵
- Enumerates kernel/hardware configuration
PID:1541

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact