244ed096d26ae952b472dfbfbd27c6eed8db08e02ba6b5239236ef4d5a977e6d

Analysis

max time kernel
0s
max time network
130s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
11/10/2026, 17:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
244ed096d26ae952b472dfbfbd27c6eed8db08e02ba6b5239236ef4d5a977e6d.elf
Size 4.5MB
Sample261011-v21a1ax18l
SHA256 244ed096d26ae952b472dfbfbd27c6eed8db08e02ba6b5239236ef4d5a977e6d
MD5 ff107185650f7780b74f584f2ce275dc
SHA1 5486f4183f173686fa444c218c6b2dd62149c15b
SHA512 dda5a9c8d5eedbeaf4842c6360e9b9a12d5d19e409fdfb8758152a735bb767ef67fb8d681663bdecadec1664509eabb43a803f51b1064f33440f460cdfaab80f
SSDEEP 49152:vIPweIRiyshXorLNEwVzZbW9teAJTwu7dXLcK/tCZ2kZLKYDsf8GulVkdkotl7qq:4TONEYb0TwAXYKFCNLjDoM/i
TLSH
T15B265B50FECB54FAD6071A7180BFA33F673155098336DBC7DA406E53E82B6E15A32229
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	244ed096d26ae952b472dfbfbd27c6eed8db08e02ba6b5239236ef4d5a977e6d.elf

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/244ed096d26ae952b472dfbfbd27c6eed8db08e02ba6b5239236ef4d5a977e6d.elf.pid	244ed096d26ae952b472dfbfbd27c6eed8db08e02ba6b5239236ef4d5a977e6d.elf

/tmp/244ed096d26ae952b472dfbfbd27c6eed8db08e02ba6b5239236ef4d5a977e6d.elf
/tmp/244ed096d26ae952b472dfbfbd27c6eed8db08e02ba6b5239236ef4d5a977e6d.elf
1⤵
- Enumerates kernel/hardware configuration
- Writes file to tmp directory
PID:1494

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads