7e8e404343560a437a1a244f11e0fd3be5d4edacf77c141470ab5820868e6779

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
24/10/2026, 01:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7e8e404343560a437a1a244f11e0fd3be5d4edacf77c141470ab5820868e6779
Size 1KB
Sample261024-b4477ae131
SHA256 7e8e404343560a437a1a244f11e0fd3be5d4edacf77c141470ab5820868e6779
MD5 45dc72822564ff12ba278a849825908b
SHA1 81e78ac14aff066122e06153550f206c1e8174f4
SHA512 838c0e07c45e887480319302554c0d971270f440813fda0f9911bdc0538753a5cf148643cb2966c334b1bd4f025c0095203995c27c8403a76de412393b81cddd
TLSH
T18C1196DD7721DE0145EC9D08FF66F08CB024F6FD1B5B6E5469C98879A4B850BB02CA28
MD5 SHA1 SHA512 TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

File and Directory Permissions Modification 1 TTPs 12 IoCs

Adversaries may modify file or directory permissions to evade defenses.

defense_evasion

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
1530	chmod
1534	chmod
1547	chmod
1551	chmod
1555	chmod
1516	chmod
1539	chmod
1543	chmod
1559	chmod
1512	chmod
1521	chmod
1525	chmod

System Network Configuration Discovery 1 TTPs 2 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1536	0upmips
1537	rm

/tmp/7e8e404343560a437a1a244f11e0fd3be5d4edacf77c141470ab5820868e6779
/tmp/7e8e404343560a437a1a244f11e0fd3be5d4edacf77c141470ab5820868e6779
1⤵
PID:1509
- /bin/chmod
  chmod 777 0uparm
  2⤵
  - File and Directory Permissions Modification
  PID:1512
- /tmp/0uparm
  ./0uparm axel
  2⤵
  PID:1513
- /bin/rm
  rm -rf 0uparm
  2⤵
  PID:1514
- /bin/chmod
  chmod 777 0uparm5
  2⤵
  - File and Directory Permissions Modification
  PID:1516
- /tmp/0uparm5
  ./0uparm5 axel
  2⤵
  PID:1517
- /bin/rm
  rm -rf 0uparm5
  2⤵
  PID:1519
- /bin/chmod
  chmod 777 0uparm6
  2⤵
  - File and Directory Permissions Modification
  PID:1521
- /tmp/0uparm6
  ./0uparm6 axel
  2⤵
  PID:1522
- /bin/rm
  rm -rf 0uparm6
  2⤵
  PID:1523
- /bin/chmod
  chmod 777 0uparm7
  2⤵
  - File and Directory Permissions Modification
  PID:1525
- /tmp/0uparm7
  ./0uparm7 axel
  2⤵
  PID:1527
- /bin/rm
  rm -rf 0uparm7
  2⤵
  PID:1528
- /bin/chmod
  chmod 777 0upm68k
  2⤵
  - File and Directory Permissions Modification
  PID:1530
- /tmp/0upm68k
  ./0upm68k axel
  2⤵
  PID:1531
- /bin/rm
  rm -rf 0upm68k
  2⤵
  PID:1532
- /bin/chmod
  chmod 777 0upmips
  2⤵
  - File and Directory Permissions Modification
  PID:1534
- /tmp/0upmips
  ./0upmips axel
  2⤵
  - System Network Configuration Discovery
  PID:1536
- /bin/rm
  rm -rf 0upmips
  2⤵
  - System Network Configuration Discovery
  PID:1537
- /bin/chmod
  chmod 777 0upmpsl
  2⤵
  - File and Directory Permissions Modification
  PID:1539
- /tmp/0upmpsl
  ./0upmpsl axel
  2⤵
  PID:1540
- /bin/rm
  rm -rf 0upmpsl
  2⤵
  PID:1541
- /bin/chmod
  chmod 777 0upppc
  2⤵
  - File and Directory Permissions Modification
  PID:1543
- /tmp/0upppc
  ./0upppc axel
  2⤵
  PID:1544
- /bin/rm
  rm -rf 0upppc
  2⤵
  PID:1545
- /bin/chmod
  chmod 777 0upsh4
  2⤵
  - File and Directory Permissions Modification
  PID:1547
- /tmp/0upsh4
  ./0upsh4 axel
  2⤵
  PID:1548
- /bin/rm
  rm -rf 0upsh4
  2⤵
  PID:1549
- /bin/chmod
  chmod 777 0upspc
  2⤵
  - File and Directory Permissions Modification
  PID:1551
- /tmp/0upspc
  ./0upspc axel
  2⤵
  PID:1552
- /bin/rm
  rm -rf 0upspc
  2⤵
  PID:1553
- /bin/chmod
  chmod 777 0upx64
  2⤵
  - File and Directory Permissions Modification
  PID:1555
- /tmp/0upx64
  ./0upx64 axel
  2⤵
  PID:1556
- /bin/rm
  rm -rf 0upx64
  2⤵
  PID:1557
- /bin/chmod
  chmod 777 0upx86
  2⤵
  - File and Directory Permissions Modification
  PID:1559
- /tmp/0upx86
  ./0upx86 axel
  2⤵
  PID:1560
- /bin/rm
  rm -rf 0upx86
  2⤵
  PID:1561

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads