Analysis

  • max time kernel
    0s
  • max time network
    132s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20260513-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    26/09/2026, 16:34

General

  • Target
    __main__.py
  • Size 367B
  • Sample260926-t29c8sysav
  • SHA256 0f3a8c84d636cbcf5eaacd079dde213a18cc7d6f4e86785d8497431fdca2ce6c
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Command and Scripting Interpreter: Python 1 TTPs 4 IoCs

    Execution via Python.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/__main__.py
    /tmp/__main__.py
    1⤵
      PID:1495
    • /usr/local/sbin/python3
      python3 /tmp/__main__.py
      1⤵
      • Command and Scripting Interpreter: Python
      PID:1495
    • /usr/local/bin/python3
      python3 /tmp/__main__.py
      1⤵
      • Command and Scripting Interpreter: Python
      PID:1495
    • /usr/sbin/python3
      python3 /tmp/__main__.py
      1⤵
      • Command and Scripting Interpreter: Python
      PID:1495
    • /usr/bin/python3
      python3 /tmp/__main__.py
      1⤵
      • Command and Scripting Interpreter: Python
      • Writes file to tmp directory
      PID:1495

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          __init__.cpython-36.pyc.140284183510640

          • Path /tmp/yt_dlp/__pycache__/__init__.cpython-36.pyc.140284183510640
          • Size 32KB
          • SHA256 84e36c67f842011c9170788630a1ecaab0348a4c0a7cfb1aabe441184d369e19
          • MD5 SHA1 SHA512 SSDEEP TLSH