143313496254a4c919ae4c0a22ffe38ab04b820915e90a4dcaa16dd75a062dc5

Analysis

max time kernel
0s
max time network
130s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
08/11/2026, 06:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bUeMPA
Size 1.3MB
Sample261108-g2dv4sysds
SHA256 143313496254a4c919ae4c0a22ffe38ab04b820915e90a4dcaa16dd75a062dc5
MD5 e9e0f64bea63e5ce78a1292c87b889c9
SHA1 0f3c3a9cf460f594d332ef07574561b197a0bd33
SHA512 1e0afc994201b564a2749a518ba785f49245f730dc92a9570b633dee710abdb40c048b00630fdd0ab66aac162b36ccdbb7a78a87f62c5b05cbd318a68184d93a
SSDEEP 24576:x4k8SfzvMfCv/G4NRRf1NxrCURCFNBGOSQn652wOPn+m4:+k8SbMfCHZXvxrxRCFNcOJagJ4
TLSH
T111556A05F940DA6BC53362B4964FE332C9302A3457238B87BF596C347A2F791AF28756
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
1553	bUeMPA

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	1554	bUeMPA

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	bUeMPA

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/cgroup	bUeMPA
File opened for reading	/proc/self/mountinfo	bUeMPA

/tmp/bUeMPA
/tmp/bUeMPA
1⤵
- Deletes itself
- Changes its process name
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1553

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads