130f1e050f427e47f81dbb44126d3b237f2c18c2227f6f29218679149749cf48

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
22/07/2026, 04:09

Target
docker-package.sh
Size 10KB
Sample260722-eq1jmayclf
SHA256 130f1e050f427e47f81dbb44126d3b237f2c18c2227f6f29218679149749cf48
MD5 1abc3ef47b224bee7f6992d8aa2b4b76
SHA1 2540db0267338214d1556040326724c847509c95
SHA512 de64b368319430c04939a4aecf7ddd2553daa362a7f9144232d256a2d8efb52fe6d65e8fd7ec0fdb8744edc665814955ee86aa461bd656ce1b567b84580b9850
SSDEEP 96:8RjxDYAKrAyUx8VOV+nZVZQu3XgvP5g6GK/I9/PEgIpD+iiEEGrgNxvO63jQLGt9:8ld+r7mVMtXohFQQDJ/rqvO6Tfxme
TLSH
T10522C55AF61187B0A16B12300DD7218A7513A107DE08262A77CD405F1FBFFD862BE6BA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/filesystems	mkdir

/tmp/docker-package.sh
/tmp/docker-package.sh
1⤵
PID:648
- /usr/bin/dirname
  dirname /tmp/docker-package.sh
  2⤵
  PID:657
- /bin/rm
  rm -rf /tmp/offline-package
  2⤵
  PID:662
- /bin/mkdir
  mkdir -p /tmp/offline-package
  2⤵
  - Reads runtime system information
  PID:667