Overview
overview
3Static
static
1linux-meta.../rules
ubuntu-18.04-amd64
3linux-meta.../rules
debian-9-armhf
3linux-meta.../rules
debian-9-mips
linux-meta.../rules
debian-9-mipsel
linux-meta...tu-log
ubuntu-18.04-amd64
3linux-meta...tu-log
debian-9-armhf
3linux-meta...tu-log
debian-9-mips
linux-meta...tu-log
debian-9-mipsel
Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
21/07/2026, 15:52
Static task
static1
Behavioral task
behavioral1
Sample
linux-meta/debian/rules
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
linux-meta/debian/rules
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
linux-meta/debian/rules
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
linux-meta/debian/rules
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral5
Sample
linux-meta/debian/scripts/misc/git-ubuntu-log
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral6
Sample
linux-meta/debian/scripts/misc/git-ubuntu-log
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral7
Sample
linux-meta/debian/scripts/misc/git-ubuntu-log
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral8
Sample
linux-meta/debian/scripts/misc/git-ubuntu-log
Resource
debian9-mipsel-20260513-en
General
- Target linux-meta/debian/rules
- Size 3KB
- Sample260721-tbd5eaca69
- SHA256 23d3635882509bce7d69693b2717558215fd45d3fb533790b5c3b666b9746cc2
- MD5 94f3e09f65399857faa4e5985d2477a2
- SHA1 591d2aabbf0e4ba54acbb2b75ce7709877c95a03
- SHA512 0b6ba4dce524c532732d17e59e0ef8ed1aaff8ebbb854b4c0d0f029453a36fef47e8c3e98ae7619eebc471a51c3c97dd6e050923a572c6998b3eb1e1c79391e3
- TLSH T18D617554C3F81BB6768EE14AFB6CB05B9BFDC282C3311A57938D39CA63C155841CB829
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
-
description ioc Process File opened for reading /proc/filesystems ls File opened for reading /proc/filesystems ls
Processes
-
/tmp/linux-meta/debian/rules/tmp/linux-meta/debian/rules1⤵PID:650
-
/bin/sh/bin/sh -c "LC_ALL=C ls -d debian/control.d/primary debian/control.d/transitionals-* 2>/dev/null"2⤵PID:655
-
/bin/lsls -d debian/control.d/primary "debian/control.d/transitionals-*"3⤵
- Reads runtime system information
PID:658
-
-
-
/bin/sh/bin/sh -c "LC_ALL=C ls -d debian/control.d/*"2⤵PID:661
-
/bin/lsls -d "debian/control.d/*"3⤵
- Reads runtime system information
PID:663
-
-