cad417b62c0def9cc0f483c46cc377d06cabaf74cd8e7c99915855ba2e483b6c

Resubmissions

06/10/2026, 14:26

261006-rr72bafc363

06/10/2026, 14:18

261006-rmmjtazs5l8

Analysis

max time kernel
0s
max time network
1s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20250619-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20250619-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
06/10/2026, 14:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Activator/src/main.py
Size 524B
Sample261006-rr72bafc36
SHA256 cad417b62c0def9cc0f483c46cc377d06cabaf74cd8e7c99915855ba2e483b6c
MD5 10131ff59d133eeadd8e72844328e58e
SHA1 434a02f061ccadaeb68089953eac021e2683fd24
SHA512 33b4bf5665fdcfb2cafc3fbced1f22a87e65f5f2667372e8158745f015aed9ec160e245bb61591a0d5d569a53fb825ba2782ca1d7b2a2baf32b0dffca1dc2112
TLSH
T11CF0C9BEA269A3AE00AA8464664E227F806701ECF52C0463B7104910702CC36E3963CC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

Command and Scripting Interpreter: Python 1 TTPs 1 IoCs

Execution via Python.

execution

Python

T1059.006

pid	Process
2040	python3

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/sys/crypto/fips_enabled	python3

/usr/bin/python3
python3 /tmp/Activator/src/main.py
1⤵
- Command and Scripting Interpreter: Python
- Reads runtime system information
PID:2040

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Python

T1059.006

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads