Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    21/07/2026, 15:52

General

  • Target
    linux-meta/debian/rules
  • Size 3KB
  • Sample260721-tbd5eaca69
  • SHA256 23d3635882509bce7d69693b2717558215fd45d3fb533790b5c3b666b9746cc2
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Reads runtime system information 2 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/linux-meta/debian/rules
    /tmp/linux-meta/debian/rules
    1⤵
      PID:650
      • /bin/sh
        /bin/sh -c "LC_ALL=C ls -d debian/control.d/primary debian/control.d/transitionals-* 2>/dev/null"
        2⤵
          PID:655
          • /bin/ls
            ls -d debian/control.d/primary "debian/control.d/transitionals-*"
            3⤵
            • Reads runtime system information
            PID:658
        • /bin/sh
          /bin/sh -c "LC_ALL=C ls -d debian/control.d/*"
          2⤵
            PID:661
            • /bin/ls
              ls -d "debian/control.d/*"
              3⤵
              • Reads runtime system information
              PID:663

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads