89b64bd45478e53299f9c422cbba40fac3ac0712b551b85185e38203f7f984c6

Analysis

max time kernel
1s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
02/10/2026, 16:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
89b64bd45478e53299f9c422cbba40fac3ac0712b551b85185e38203f7f984c6
Size 5.2MB
Sample261002-t1fpjayare
SHA256 89b64bd45478e53299f9c422cbba40fac3ac0712b551b85185e38203f7f984c6
MD5 d3868f69c8210c9479021457cae308ba
SHA1 5cfa202f9f65f05417dc9c72f1e8c4f68ce01342
SHA512 ae910d9d238e2b35a4050aaba69734a028a492198de923b76864b2cea5bf9168855c6a45d026e43224303e5e411bea19bf8b47ea3390042fbe769174fdeeefac
SSDEEP 98304:dF6DICDxE8vg7EOT5bIoH/WZXSD+qZWrmmVlnNJFU3/rmtVeVTLwgOwmDpCzrV/m:d0Ioxlvg9T5bIoHeZK+qErj/JWTOqT9G
TLSH
T1BA4633BF0D411134C54E3A62BEEAC03CAD8757C3B3BABD91ADF45930C9554D8A68C7A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 4 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	89b64bd45478e53299f9c422cbba40fac3ac0712b551b85185e38203f7f984c6
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_period_us	89b64bd45478e53299f9c422cbba40fac3ac0712b551b85185e38203f7f984c6
File opened for reading	/sys/kernel/mm/hugepages	89b64bd45478e53299f9c422cbba40fac3ac0712b551b85185e38203f7f984c6
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	89b64bd45478e53299f9c422cbba40fac3ac0712b551b85185e38203f7f984c6

Reads runtime system information 4 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/exe	89b64bd45478e53299f9c422cbba40fac3ac0712b551b85185e38203f7f984c6
File opened for reading	/proc/self/cgroup	89b64bd45478e53299f9c422cbba40fac3ac0712b551b85185e38203f7f984c6
File opened for reading	/proc/self/mountinfo	89b64bd45478e53299f9c422cbba40fac3ac0712b551b85185e38203f7f984c6
File opened for reading	/proc/stat	89b64bd45478e53299f9c422cbba40fac3ac0712b551b85185e38203f7f984c6

/tmp/89b64bd45478e53299f9c422cbba40fac3ac0712b551b85185e38203f7f984c6
/tmp/89b64bd45478e53299f9c422cbba40fac3ac0712b551b85185e38203f7f984c6
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1481

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

agent.lock

Path /var/lib/platypus/agent.lock
Size 5B
SHA256 137ebf8f6dd8bbc02587aa16204f2aa671e4f8444096889ac0cc8cd77b667c12
MD5 a0faa388a7a23f27cb0bf8968b1efba0
SHA1 a22545a9a26ae88057a08682d39e531fc603a36a
SHA512 efe72c613014076ed6b92c8bc67ecf0a5ace6295ac829f71b64324d46b0c3659eec1b86b3605cffbaa9c988a76ca230e727a84b708832ad672da9217f282734e
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads