74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
10/09/2026, 09:27

Target
74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
Size 83KB
Sample260910-lesszaan4y
SHA256 74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
MD5 484a6686325f7460349208e736433288
SHA1 0a1fb016bd10bac5455175c79aa4511e5ff1a330
SHA512 2cece3b47e9fe78f846b0f753e856f015f72e9b6340e62589d6e32c7fc528e06d04629a0e6526d1d688491ebfd1b81066f48e42ed5e86ea5541eeb24de02c13b
SSDEEP 1536:pDitm7oIt8TlUaNlgA8GYHw+X3n73z3Quw8q:R/7oZkN7jguQ
TLSH
T14083197565481AB03B5BC17D9DD69514620F3D1B18A63420F2EEB28C1F7D320F1BABAD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads runtime system information 4 IoCs

Reads data from /proc virtual filesystem.

/tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
/tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
1⤵
PID:1539

/usr/local/sbin/bash
bash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
1⤵
PID:1539

/usr/local/bin/bash
bash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
1⤵
PID:1539

/usr/sbin/bash
bash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
1⤵
PID:1539

/usr/bin/bash
bash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
1⤵
PID:1539

/sbin/bash
bash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
1⤵
PID:1539

/bin/bash
bash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
1⤵
PID:1539
- /usr/bin/dirname
  dirname /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
  2⤵
  PID:1542
- /bin/sed
  sed "s/[^a-zA-Z0-9._-]/-/g"
  2⤵
  - Reads runtime system information
  PID:1545
- /usr/bin/whoami
  whoami
  2⤵
  PID:1544
- /bin/sed
  sed "s/[^a-zA-Z0-9._-]/-/g"
  2⤵
  - Reads runtime system information
  PID:1548
- /usr/bin/whoami
  whoami
  2⤵
  PID:1547
- /bin/sed
  sed "s/[^a-zA-Z0-9._-]/-/g"
  2⤵
  - Reads runtime system information
  PID:1552
- /bin/sed
  sed "s/\\.local\$//"
  2⤵
  - Reads runtime system information
  PID:1551
- /bin/hostname
  hostname
  2⤵
  PID:1550
- /usr/bin/dirname
  dirname /tmp/data_root
  2⤵
  PID:1553
- /bin/uname
  uname -s
  2⤵
  PID:1557
- /usr/bin/python3
  /usr/bin/python3 -c "import plyvel"
  2⤵
  PID:1558
- /usr/bin/python3
  /usr/bin/python3 -c "import plyvel_ci"
  2⤵
  PID:1566
- /bin/uname
  uname -s
  2⤵
  PID:1567
- /usr/bin/whoami
  whoami
  2⤵
  PID:1575
- /bin/rm
  rm -- /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
  2⤵
  PID:1576