Overview
overview
3Static
static
1marketplac...art.sh
ubuntu-18.04-amd64
3marketplac...art.sh
debian-9-armhf
3marketplac...art.sh
debian-9-mips
3marketplac...art.sh
debian-9-mipsel
3marketplac...der.py
ubuntu-18.04-amd64
3marketplac...der.py
debian-9-armhf
3marketplac...der.py
debian-9-mips
3marketplac...der.py
debian-9-mipsel
3marketplac...ine.py
ubuntu-18.04-amd64
3marketplac...ine.py
debian-9-armhf
3marketplac...ine.py
debian-9-mips
3marketplac...ine.py
debian-9-mipsel
3marketplac...use.py
ubuntu-18.04-amd64
3marketplac...use.py
debian-9-armhf
3marketplac...use.py
debian-9-mips
3marketplac...use.py
debian-9-mipsel
3marketplac...use.py
ubuntu-18.04-amd64
3marketplac...use.py
debian-9-armhf
3marketplac...use.py
debian-9-mips
3marketplac...use.py
debian-9-mipsel
3marketplac...top.py
ubuntu-18.04-amd64
3marketplac...top.py
debian-9-armhf
3marketplac...top.py
debian-9-mips
3marketplac...top.py
debian-9-mipsel
3marketplac...mit.py
ubuntu-18.04-amd64
3marketplac...mit.py
debian-9-armhf
3marketplac...mit.py
debian-9-mips
3marketplac...mit.py
debian-9-mipsel
3marketplac...art.sh
ubuntu-18.04-amd64
3marketplac...art.sh
debian-9-armhf
3marketplac...art.sh
debian-9-mips
3marketplac...art.sh
debian-9-mipsel
3Analysis
- max time kernel
3s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
02/06/2026, 12:12
Static task
static1
Behavioral task
behavioral1
Sample
marketplaces/claude-plugins-official/plugins/explanatory-output-style/hooks-handlers/session-start.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
marketplaces/claude-plugins-official/plugins/explanatory-output-style/hooks-handlers/session-start.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
marketplaces/claude-plugins-official/plugins/explanatory-output-style/hooks-handlers/session-start.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
marketplaces/claude-plugins-official/plugins/explanatory-output-style/hooks-handlers/session-start.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral5
Sample
marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral6
Sample
marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral7
Sample
marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral8
Sample
marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral9
Sample
marketplaces/claude-plugins-official/plugins/hookify/core/rule_engine.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral10
Sample
marketplaces/claude-plugins-official/plugins/hookify/core/rule_engine.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral11
Sample
marketplaces/claude-plugins-official/plugins/hookify/core/rule_engine.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral12
Sample
marketplaces/claude-plugins-official/plugins/hookify/core/rule_engine.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral13
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/posttooluse.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral14
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/posttooluse.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral15
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/posttooluse.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral16
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/posttooluse.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral17
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/pretooluse.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral18
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/pretooluse.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral19
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/pretooluse.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral20
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/pretooluse.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral21
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/stop.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral22
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/stop.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral23
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/stop.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral24
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/stop.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral25
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/userpromptsubmit.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral26
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/userpromptsubmit.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral27
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/userpromptsubmit.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral28
Sample
marketplaces/claude-plugins-official/plugins/hookify/hooks/userpromptsubmit.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral29
Sample
marketplaces/claude-plugins-official/plugins/learning-output-style/hooks-handlers/session-start.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral30
Sample
marketplaces/claude-plugins-official/plugins/learning-output-style/hooks-handlers/session-start.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral31
Sample
marketplaces/claude-plugins-official/plugins/learning-output-style/hooks-handlers/session-start.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral32
Sample
marketplaces/claude-plugins-official/plugins/learning-output-style/hooks-handlers/session-start.sh
Resource
debian9-mipsel-20260513-en
General
- Target marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py
- Size 9KB
- Sample260602-pdndmscx41
- SHA256 9f1d083cc43883323ddf00747e7696a4fd9d478ddd63f5b43038657da8516e56
- MD5 4b4024bd183e39dbadab43e725205c72
- SHA1 809fc494fc9f1f90f071015e0190d93163b4872b
- SHA512 359e4f6cf53c6079a6492a22813c45db3de5a9a6fd8828ea5d44035debe67560adb01b421713e800c78a4a58a642568174449683ae9ed3b1bb69487ca3c5ae7b
- SSDEEP 192:8pAiFQY1BXjuhBytdcq60PDPcvbX2BXsARLt:8pAiyQBXjuhEMqg7wsmLt
- TLSH T1E8124523E8501867C387456D9DDBA424E611D92BBA141138FADC912C3F8F578C3FAABD
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
pid Process 717 python3 717 python3 717 python3 717 python3
Processes
-
/tmp/marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py/tmp/marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py1⤵PID:717
-
/usr/local/sbin/python3python3 /tmp/marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py1⤵
- Command and Scripting Interpreter: Python
PID:717
-
/usr/local/bin/python3python3 /tmp/marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py1⤵
- Command and Scripting Interpreter: Python
PID:717
-
/usr/sbin/python3python3 /tmp/marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py1⤵
- Command and Scripting Interpreter: Python
PID:717
-
/usr/bin/python3python3 /tmp/marketplaces/claude-plugins-official/plugins/hookify/core/config_loader.py1⤵
- Command and Scripting Interpreter: Python
PID:717