6a63d6cb2aee37bb41a48fecc51bf635c9ff7cf3240bc666862b310495cd82e3

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
10/09/2026, 04:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6a63d6cb2aee37bb41a48fecc51bf635c9ff7cf3240bc666862b310495cd82e3.elf
Size 864KB
Sample260910-em282sxaqe
SHA256 6a63d6cb2aee37bb41a48fecc51bf635c9ff7cf3240bc666862b310495cd82e3
MD5 59e6374648dedaca6a38967363593fbc
SHA1 d6410208d951ecab9d30c0a7b75aa0f376f3204a
SHA512 88bc8a442f8c219223b906575bf73142e4535a35a70c7149895c89dd5183f4f9810d33ab594f15129cfb4d334215e80c2effbc4f4191344b8d643d2c70f91008
SSDEEP 12288:K5x4kI4Pu/nLPVMYeLxXmc52Wd+33MmyHIiH5k:K5x4kLG/nLPVGLxXmc59dmH
TLSH
T1E0158D5AF1B370FCC55BC031436BDB726931F46911216EBB12C4EA392D91EB02729FA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Reads network interface configuration 2 TTPs 1 IoCs

Fetches information about one or more active network interfaces.

discovery

System Network Configuration Discovery

T1016

System Network Connections Discovery

T1049

description	ioc	Process
File opened for reading	/sys/class/net/ens3/speed	6a63d6cb2aee37bb41a48fecc51bf635c9ff7cf3240bc666862b310495cd82e3.elf

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/class/net	6a63d6cb2aee37bb41a48fecc51bf635c9ff7cf3240bc666862b310495cd82e3.elf

/tmp/6a63d6cb2aee37bb41a48fecc51bf635c9ff7cf3240bc666862b310495cd82e3.elf
/tmp/6a63d6cb2aee37bb41a48fecc51bf635c9ff7cf3240bc666862b310495cd82e3.elf
1⤵
- Reads network interface configuration
- Enumerates kernel/hardware configuration
PID:1501

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Network Connections Discovery

T1049

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads