b1ee0d787c5b7f50b184274d2c4f4cc9fe2d153b528564a08ecd3de827fd6823

Analysis

max time kernel
0s
max time network
132s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
29/10/2026, 21:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lib/goProxy_linux
Size 5.4MB
Sample261029-1qfp4stsct
SHA256 b1ee0d787c5b7f50b184274d2c4f4cc9fe2d153b528564a08ecd3de827fd6823
MD5 76f959396006d65d60499b964de2d2df
SHA1 1f980875de1436b310b0d8f2eb3722b597274e85
SHA512 39bbe46c1ea7b1f7295946db5afa7b201b1eba84431528dc8e67b6aa0f2db249d8676580c4136100681df2de250a441a4c05453142086d3d9eab0d855faff5c4
SSDEEP 98304:2162qNmrJ3aDsRU89AlqQNgxbUVPnbSTV2W8PTXTDN4RAqpeDF:jNmrJqMU89Apo0ckL+RfpeZ
TLSH
T1D04633E63AF70AB359BE91BB36B190D50492133E486454038195E7E252FDF83B3B58CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	goProxy_linux

Reads runtime system information 5 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/stat	goProxy_linux
File opened for reading	/proc/sys/net/core/somaxconn	goProxy_linux
File opened for reading	/proc/1535/status	goProxy_linux
File opened for reading	/proc/self/status	goProxy_linux
File opened for reading	/proc/self/exe	goProxy_linux

/tmp/lib/goProxy_linux
/tmp/lib/goProxy_linux
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1535

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads