bf29e8791d48586238668b11554db5c5b8bed2f27d0921ebae3d99bdd94cc190

Analysis

max time kernel
0s
max time network
14s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
30/09/2026, 20:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.zos.orig
Size 21KB
Sample260930-ysdmestgqa
SHA256 bf29e8791d48586238668b11554db5c5b8bed2f27d0921ebae3d99bdd94cc190
MD5 540bf82d7cce92e2fcd7710bb92da2ff
SHA1 572d380cb640cadb3062a65ec2ecbdbb53b4505c
SHA512 822d6022c0abc53a7af3c7d37cb460d2eaaf90cbc701a7a9dcfa7119021bcbbb025ccc76064d5f95b68e8c5f7494594e76cb99984b56af7c70b596d94a78d08f
SSDEEP 384:6VF/wabxqlwkZ5g/kp52W9+O11fYdSPHf3yuQMU1Jw0QX0iLoxdhFjH3ic+o:6kGY6jAH11fYiHHQBTQfmdhx1x
TLSH
T1A2A2B712A945D17F0B070091260EB84C7325806F4770E0AE7A9CA9777F75A5D42AFAEF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 3 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/version	cat
File opened for reading	/proc/version	grep
File opened for reading	/proc/version	grep

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1484	generate_boot_scripts.sh.zos.orig

/tmp/products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.zos.orig
/tmp/products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.zos.orig
1⤵
- System Network Configuration Discovery
PID:1484
- /bin/uname
  uname -s
  2⤵
  PID:1485
- /bin/grep
  grep -i "Red Hat" /proc/version
  2⤵
  - Reads runtime system information
  PID:1486
- /bin/grep
  grep -i "SUSE Linux" /proc/version
  2⤵
  - Reads runtime system information
  PID:1487
- /bin/cat
  cat /proc/version
  2⤵
  - Reads runtime system information
  PID:1488

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads