Analysis
- max time kernel
0s - max time network
129s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
17/10/2026, 09:24
Static task
static1
Behavioral task
behavioral1
Sample
31.56.209.86_sample.bin
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
General
- Target 31.56.209.86_sample.bin
- Size 8.4MB
- Sample261017-ldcelads91
- SHA256 930bd18632df0776656657238a3beb85d94d01d07bc93e2ec2962dca78db07b3
- MD5 6cb5f351efc46c162919cad6181539c5
- SHA1 bb8bb18af96f4fbe62cd05e68a4e19387d1bfdd1
- SHA512 bc22da74dcdce2ed0a231b446525311d6d3780e7267b5d144cd7e71ea124bfdff0e8c0f5408ca144f512060ec71cdab5fa1db79fdd49485f7f0bd144412fdb96
- SSDEEP 98304:SRRn8AS9sQ6RgMdI0KYKMvLkJiKgdTvE/cnBLN47jTVTDkMVRLoO:qs4R10YKMvIJiK2YGLN4fJsMPF
- TLSH T102969D17EC6529A9C1EE927189779152BB31BC494B3163D32B50F7386FB3BD4A9B8300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates kernel/hardware configuration 1 TTPs 3 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size 31.56.209.86_sample.bin File opened for reading /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us 31.56.209.86_sample.bin File opened for reading /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_period_us 31.56.209.86_sample.bin -
description ioc Process File opened for reading /proc/self/mountinfo 31.56.209.86_sample.bin File opened for reading /proc/self/cgroup 31.56.209.86_sample.bin