f70b88aa909860987d0f692a46ee12653f3c3b092385bc1066fca0e207799437

Login
Reports

Overview

overview

Static

static

products/c...sm.ps1

windows10-2004-x64

products/c...sm.ps1

windows11-ltsc_2024-x64

products/c...sm.pdf

windows10-2004-x64

products/c...sm.pdf

windows11-ltsc_2024-x64

products/c...x.orig

ubuntu-18.04-amd64

products/c...x.orig

debian-9-armhf

products/c...x.orig

debian-9-mips

products/c...x.orig

debian-9-mipsel

products/c...s.orig

ubuntu-18.04-amd64

products/c...s.orig

debian-9-armhf

products/c...s.orig

debian-9-mips

products/c...s.orig

debian-9-mipsel

products/c...mplate

ubuntu-18.04-amd64

products/c...mplate

debian-9-armhf

products/c...mplate

debian-9-mips

products/c...mplate

debian-9-mipsel

products/c...mplate

ubuntu-18.04-amd64

products/c...mplate

debian-9-armhf

products/c...mplate

debian-9-mips

products/c...mplate

debian-9-mipsel

products/c...prolog

ubuntu-18.04-amd64

products/c...prolog

debian-9-armhf

products/c...prolog

debian-9-mips

products/c...prolog

debian-9-mipsel

products/c...prolog

ubuntu-18.04-amd64

products/c...prolog

debian-9-armhf

products/c...prolog

debian-9-mips

products/c...prolog

debian-9-mipsel

products/c...prolog

ubuntu-18.04-amd64

products/c...prolog

debian-9-armhf

products/c...prolog

debian-9-mips

products/c...prolog

debian-9-mipsel

Analysis

max time kernel
0s
max time network
13s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
30/09/2026, 20:02

Sharing

Copy URL Twitter E-mail

Static task

static1

9 signatures

Behavioral task

behavioral1

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/SAS_lsm.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral2

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/SAS_lsm.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral3

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/SAS_lsm.pdf

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral4

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/SAS_lsm.pdf

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral5

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.unx.orig

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

2 signatures

150 seconds

discovery

Behavioral task

behavioral6

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.unx.orig

Resource

debian9-armhf-20260513-en

debian-9-armhf

2 signatures

150 seconds

discovery

Behavioral task

behavioral7

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.unx.orig

Resource

debian9-mipsbe-20260513-en

debian-9-mips

2 signatures

150 seconds

discovery

Behavioral task

behavioral8

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.unx.orig

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

2 signatures

150 seconds

discovery

Behavioral task

behavioral9

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.zos.orig

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

2 signatures

150 seconds

discovery

Behavioral task

behavioral10

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.zos.orig

Resource

debian9-armhf-20260513-en

debian-9-armhf

2 signatures

150 seconds

discovery

Behavioral task

behavioral11

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.zos.orig

Resource

debian9-mipsbe-20260513-en

debian-9-mips

2 signatures

150 seconds

discovery

Behavioral task

behavioral12

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.zos.orig

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

2 signatures

150 seconds

discovery

Behavioral task

behavioral13

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.mid.template

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

discovery

Behavioral task

behavioral14

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.mid.template

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

discovery

Behavioral task

behavioral15

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.mid.template

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral16

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.mid.template

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

discovery

Behavioral task

behavioral17

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.pre.template

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

2 signatures

150 seconds

discovery

Behavioral task

behavioral18

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.pre.template

Resource

debian9-armhf-20260513-en

debian-9-armhf

2 signatures

150 seconds

discovery

Behavioral task

behavioral19

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.pre.template

Resource

debian9-mipsbe-20260513-en

debian-9-mips

2 signatures

150 seconds

discovery

Behavioral task

behavioral20

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers.pre.template

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

2 signatures

150 seconds

discovery

Behavioral task

behavioral21

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_aix.prolog

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

discovery

Behavioral task

behavioral22

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_aix.prolog

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

discovery

Behavioral task

behavioral23

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_aix.prolog

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral24

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_aix.prolog

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

discovery

Behavioral task

behavioral25

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_hpux.prolog

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

discovery

Behavioral task

behavioral26

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_hpux.prolog

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

discovery

Behavioral task

behavioral27

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_hpux.prolog

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral28

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_hpux.prolog

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

discovery

Behavioral task

behavioral29

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_rhel.prolog

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

discovery

Behavioral task

behavioral30

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_rhel.prolog

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

discovery

Behavioral task

behavioral31

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_rhel.prolog

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral32

Sample

products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_rhel.prolog

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

discovery

Report Analysis Logs

General

Target
products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_rhel.prolog
Size 2KB
Sample260930-ysdmestgqa
SHA256 f70b88aa909860987d0f692a46ee12653f3c3b092385bc1066fca0e207799437
MD5 0b5efa1fea4f688d899dd26140d0626e
SHA1 73b56292dad682b38e6bd3bfa4036da4a3099d28
SHA512 a949a67295098e095b619fd061c94bf189234cec2bad9702bceb4bb86e1047d94f2ec7759f04a9f320712698bc49c8c2975f72d46c19a6603a5a77f6ff89781e
TLSH
T193516407AD4A7E7B0D960752A44EE6ED371CD2FC0661795835AD3E00230FAEE1B2E5B1
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1497	sas.servers_rhel.prolog

Processes

/tmp/products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_rhel.prolog
/tmp/products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/script_templates/sas.servers_rhel.prolog
1⤵
- System Network Configuration Discovery
PID:1497

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads