1cfee868e5e488bb862140cf288fce46a167aa5982900102356dac552fa4fa43

Analysis

max time kernel
134s
max time network
138s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
28/10/2026, 00:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
worker-health
Size 7.5MB
Sample261028-af667swt8l
SHA256 1cfee868e5e488bb862140cf288fce46a167aa5982900102356dac552fa4fa43
MD5 7945967abaf6b5977b40f75bf34d631c
SHA1 8fbdc86bb9a00a7a90ae2c10beead7461f7ccfb6
SHA512 db0b19d9d2baffbb098115b4729b551ed67e3896abd57f51b420bd67fe407fd6f7ea80b02728b7910fc3f1c3aec535c8d88e1b917035f6348257549cebc94a7a
SSDEEP 98304:UXShqR9n5AJbrS7eY34XFfX/mXGUfcX0kXSlkRQAlTnE:Uv9nL7L341fP7OCpTE
TLSH
T1F4864A03ECA655E9C1AAD1308A639263BB717C485B3027E72B60F7342F77BD06A79750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 3 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	worker-health
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	worker-health
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_period_us	worker-health

Reads runtime system information 3 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/maps	worker-health
File opened for reading	/proc/self/mountinfo	worker-health
File opened for reading	/proc/self/cgroup	worker-health

/tmp/worker-health
/tmp/worker-health
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1507

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads