6e92bb1b09f4e805e1bbe1f18c85ec392d5daf6dc3a1fe1672d1fcd94029027f

Login
Reports

Overview

overview

Static

static

products/c...sm.ps1

windows10-2004-x64

products/c...sm.ps1

windows11-ltsc_2024-x64

products/c...sm.pdf

windows10-2004-x64

products/c...sm.pdf

windows11-ltsc_2024-x64

products/c...x.orig

ubuntu-18.04-amd64

products/c...x.orig

debian-9-armhf

products/c...x.orig

debian-9-mips

products/c...x.orig

debian-9-mipsel

products/c...s.orig

ubuntu-18.04-amd64

products/c...s.orig

debian-9-armhf

products/c...s.orig

debian-9-mips

products/c...s.orig

debian-9-mipsel

products/c...mplate

ubuntu-18.04-amd64

products/c...mplate

debian-9-armhf

products/c...mplate

debian-9-mips

products/c...mplate

debian-9-mipsel

products/c...mplate

ubuntu-18.04-amd64

products/c...mplate

debian-9-armhf

products/c...mplate

debian-9-mips

products/c...mplate

debian-9-mipsel

products/c...prolog

ubuntu-18.04-amd64

products/c...prolog

debian-9-armhf

products/c...prolog

debian-9-mips

products/c...prolog

debian-9-mipsel

products/c...prolog

ubuntu-18.04-amd64

products/c...prolog

debian-9-armhf

products/c...prolog

debian-9-mips

products/c...prolog

debian-9-mipsel

products/c...prolog

ubuntu-18.04-amd64

products/c...prolog

debian-9-armhf

products/c...prolog

debian-9-mips

products/c...prolog

debian-9-mipsel

Analysis

max time kernel
0s
max time network
22s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
30/09/2026, 20:02

Sharing

Copy URL Twitter E-mail

Static task

static1

9 signatures

Behavioral task

behavioral1

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/SAS_lsm.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral2

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/SAS_lsm.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral3

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/SAS_lsm.pdf

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral4

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/SAS_lsm.pdf

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral5

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.unx.orig

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

2 signatures

150 seconds

discovery

Behavioral task

behavioral6

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.unx.orig

Resource

debian9-armhf-20260513-en

debian-9-armhf

2 signatures

150 seconds

discovery

Behavioral task

behavioral7

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.unx.orig

Resource

debian9-mipsbe-20260513-en

debian-9-mips

2 signatures

150 seconds

discovery

Behavioral task

behavioral8

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.unx.orig

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

2 signatures

150 seconds

discovery

Behavioral task

behavioral9

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.zos.orig

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

2 signatures

150 seconds

discovery

Behavioral task

behavioral10

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.zos.orig

Resource

debian9-armhf-20260513-en

debian-9-armhf

2 signatures

150 seconds

discovery

Behavioral task

behavioral11

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.zos.orig

Resource

debian9-mipsbe-20260513-en

debian-9-mips

2 signatures

150 seconds

discovery

Behavioral task

behavioral12

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.zos.orig

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

2 signatures

150 seconds

discovery

Behavioral task

behavioral13

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.mid.template

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

discovery

Behavioral task

behavioral14

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.mid.template

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

discovery

Behavioral task

behavioral15

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.mid.template

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral16

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.mid.template

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

discovery

Behavioral task

behavioral17

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.pre.template

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

2 signatures

150 seconds

discovery

Behavioral task

behavioral18

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.pre.template

Resource

debian9-armhf-20260513-en

debian-9-armhf

2 signatures

150 seconds

discovery

Behavioral task

behavioral19

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.pre.template

Resource

debian9-mipsbe-20260513-en

debian-9-mips

2 signatures

150 seconds

discovery

Behavioral task

behavioral20

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.pre.template

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

2 signatures

150 seconds

discovery

Behavioral task

behavioral21

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_aix.prolog

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

discovery

Behavioral task

behavioral22

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_aix.prolog

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

discovery

Behavioral task

behavioral23

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_aix.prolog

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral24

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_aix.prolog

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

discovery

Behavioral task

behavioral25

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_hpux.prolog

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

discovery

Behavioral task

behavioral26

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_hpux.prolog

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

discovery

Behavioral task

behavioral27

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_hpux.prolog

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral28

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_hpux.prolog

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

discovery

Behavioral task

behavioral29

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_rhel.prolog

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

discovery

Behavioral task

behavioral30

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_rhel.prolog

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

discovery

Behavioral task

behavioral31

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_rhel.prolog

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral32

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_rhel.prolog

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

discovery

Report Analysis Logs

General

Target
products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.mid.template
Size 21KB
Sample260930-ysdmestgqa
SHA256 6e92bb1b09f4e805e1bbe1f18c85ec392d5daf6dc3a1fe1672d1fcd94029027f
MD5 4152b3468997142313eb899af2501904
SHA1 f59d13715fef88219eb55fea113ba4f2c4f9b122
SHA512 8225ad6df072e6d2f0088d2d9d4c15e56de690a893af137ddab13d9d815e48369110ad45e635755d6e51250a8dc749978f8fa8bb07c185b8343e2d3bc1148ca6
SSDEEP 384:Q0gMf28E2eR9tWKAmIK13BxmLMflo/2jSmLO2zHFHbX28L1E2eA728f2evKQH284:xgMuwKEqI8oUjrP7hbma1RYpJQWc7WZp
TLSH
T10EA2631AEA4589B92D0C4434476D744E3309C04F0F74BF117AAD9C623FA8697B7F4EAA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1513	sas.servers.mid.template

Processes

/tmp/products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.mid.template
/tmp/products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.mid.template
1⤵
- System Network Configuration Discovery
PID:1513
- /bin/hostname
  hostname
  2⤵
  PID:1514
- /bin/uname
  uname -n
  2⤵
  PID:1515

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads