5b6b977565179d1f2b49ea3dc6e5433121f72be8e35202e8c80d68455532d7f9

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
10/09/2026, 23:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BoxedIn.py
Size 8KB
Sample260910-24vlvsxcma
SHA256 5b6b977565179d1f2b49ea3dc6e5433121f72be8e35202e8c80d68455532d7f9
MD5 802e9dc460788d791f26a928765d879a
SHA1 4018620d40e8ec4f2ac3942f1d01dc3969853b0e
SHA512 03abfb71a3e670977c0da587aa04b53b422750f8c94bb45988e06f51a291a19921a8fb93bf013ef1910e756fea223363de9e8bd000408f44ff4971d54c885ee8
SSDEEP 192:7M1dwQHjiJqdt2RqEq1ShhKBqMJx45KB/H/osX3qzbFsqLdx+aHv8UTri:7NKiwdtzvMhhVMJ2KNf9XatLn+A0H
TLSH
T1E5029696B5D536918313AB58D8D6A0C82217E9E73EEF11783ADC33647F6091043F36AE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: Python 1 TTPs 4 IoCs

Execution via Python.

execution

Python

T1059.006

pid	Process
741	python
741	python
741	python
741	python

/tmp/BoxedIn.py
/tmp/BoxedIn.py
1⤵
PID:741

/usr/local/sbin/python
python /tmp/BoxedIn.py
1⤵
- Command and Scripting Interpreter: Python
PID:741

/usr/local/bin/python
python /tmp/BoxedIn.py
1⤵
- Command and Scripting Interpreter: Python
PID:741

/usr/sbin/python
python /tmp/BoxedIn.py
1⤵
- Command and Scripting Interpreter: Python
PID:741

/usr/bin/python
python /tmp/BoxedIn.py
1⤵
- Command and Scripting Interpreter: Python
PID:741

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Python

T1059.006

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads