Analysis
- max time kernel
0s - max time network
129s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
11/10/2026, 07:32
Static task
static1
Behavioral task
behavioral1
Sample
154.83.85.63_47991_sample.bin
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
General
- Target 154.83.85.63_47991_sample.bin
- Size 2.3MB
- Sample261011-jdbf7aea73
- SHA256 f719772f4a02c4c3cea39643219ea32f2a959e7552d3bc321116f27d49732bcc
- MD5 bca7655a0c819a12f92069d00fb38338
- SHA1 9f5caea908c1451c5d6fbea67dfd21fef5977dfb
- SHA512 9668eac1d52a8c6716c56a476266f5397498f5c504e3db98b2d703c7e7cdcf80d9b874555562045ccc411bad29bc3372e01d8d0ef397104a32c0b89a147e766e
- SSDEEP 24576:c57ww1d4h+yEvFIHb7EMFaBVjfERm9FWLXORvumj0Fm/:c5Ewr4h+yEvCHb7taBZPv2E
- TLSH T104B54B57FC9418AAC0AF9232896256A27F71BC490F2023D76F50B6782F77BE06D79704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates kernel/hardware configuration 1 TTPs 3 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size 154.83.85.63_47991_sample.bin File opened for reading /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us 154.83.85.63_47991_sample.bin File opened for reading /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_period_us 154.83.85.63_47991_sample.bin -
description ioc Process File opened for reading /proc/self/cgroup 154.83.85.63_47991_sample.bin File opened for reading /proc/self/mountinfo 154.83.85.63_47991_sample.bin