80df7729f4d5dce03087ea5f1fa5fd4ffb1c43d7e090f7e85127f21d0f0a6dbf

Analysis

max time kernel
0s
max time network
130s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
30/10/2026, 00:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tools/train_neuro_aim.py
Size 11KB
Sample261030-a73yvsvsfz
SHA256 80df7729f4d5dce03087ea5f1fa5fd4ffb1c43d7e090f7e85127f21d0f0a6dbf
MD5 41704fd33d7c2c404773da6a8a5e674c
SHA1 c46a6e3918798150b1ae951d447b0cd6c8e5cb9a
SHA512 ac808c9cc5c7fa93c5567921cce1a8966f2c986152e616830763ae6b969576d06e8c4abaa7b4acfa01b7ae1846b58c11ef4aadd2c668fd74d9c66fc323cc6a32
SSDEEP 192:XiJjOgwAJQ3VcYfpdR9oAQwGuNq5PnsqjhuztMGZsR8O4RTccMWI8M3uArLR6zfl:XigFAJURfpfQwGsq5Pnsqjhze+85TJMk
TLSH
T17532B5239D6324669383D12A09968501E72CBA4322571EB4B8DE9B783F0CD75937DEBC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

Command and Scripting Interpreter: Python 1 TTPs 4 IoCs

Execution via Python.

execution

Python

T1059.006

pid	Process
1511	python3
1511	python3
1511	python3
1511	python3

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/status	python3
File opened for reading	/proc/mounts	python3

/tmp/tools/train_neuro_aim.py
/tmp/tools/train_neuro_aim.py
1⤵
PID:1511

/usr/local/sbin/python3
python3 /tmp/tools/train_neuro_aim.py
1⤵
- Command and Scripting Interpreter: Python
PID:1511

/usr/local/bin/python3
python3 /tmp/tools/train_neuro_aim.py
1⤵
- Command and Scripting Interpreter: Python
PID:1511

/usr/sbin/python3
python3 /tmp/tools/train_neuro_aim.py
1⤵
- Command and Scripting Interpreter: Python
PID:1511

/usr/bin/python3
python3 /tmp/tools/train_neuro_aim.py
1⤵
- Command and Scripting Interpreter: Python
- Reads runtime system information
PID:1511

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Python

T1059.006

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads