196938d9b109f97a8bd4c8f4e998afc68a9bf7e91bc7e84e32f8f99c0fe02b71

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
09/09/2026, 21:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
196938d9b109f97a8bd4c8f4e998afc68a9bf7e91bc7e84e32f8f99c0fe02b71.elf
Size 864KB
Sample260909-1vecva1flh
SHA256 196938d9b109f97a8bd4c8f4e998afc68a9bf7e91bc7e84e32f8f99c0fe02b71
MD5 f9b422302de1745bc5be7dd683a5955f
SHA1 4d07719e8680fab15f907eb07c6f62c9c0410413
SHA512 babae211777cb6723032e20a876a3aedcbd77af8eb6c9fb4d6b1a16d5d0a31fa4e00ba8c2d7c9bb9631dca280793e815f62a97bd396810712384ce6ccbc7acbf
SSDEEP 12288:K5x4kI4Pf/nLPVMYeLxXmc52Wd+33MmyHIiH5k:K5x4kLX/nLPVGLxXmc59dmH
TLSH
T137158D5AF1B370FCC55BC031436BDB726931F46911216EBB12C4EA392D91EB02729FA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Reads network interface configuration 2 TTPs 1 IoCs

Fetches information about one or more active network interfaces.

discovery

System Network Configuration Discovery

T1016

System Network Connections Discovery

T1049

description	ioc	Process
File opened for reading	/sys/class/net/ens3/speed	196938d9b109f97a8bd4c8f4e998afc68a9bf7e91bc7e84e32f8f99c0fe02b71.elf

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/class/net	196938d9b109f97a8bd4c8f4e998afc68a9bf7e91bc7e84e32f8f99c0fe02b71.elf

/tmp/196938d9b109f97a8bd4c8f4e998afc68a9bf7e91bc7e84e32f8f99c0fe02b71.elf
/tmp/196938d9b109f97a8bd4c8f4e998afc68a9bf7e91bc7e84e32f8f99c0fe02b71.elf
1⤵
- Reads network interface configuration
- Enumerates kernel/hardware configuration
PID:1481

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Network Connections Discovery

T1049

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads