5357588110271bb05fe39c2738d8a5aeb640329c0354d7eef4e5e52c4d7bf537

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
22/07/2026, 18:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
linux-restricted-signatures/debian/scripts/generate-rules
Size 8KB
Sample260722-wx2hya1gla
SHA256 5357588110271bb05fe39c2738d8a5aeb640329c0354d7eef4e5e52c4d7bf537
MD5 ae752e61ca3a82c7f1b56c98cda931a9
SHA1 d006d99e511d0f7d4cb2d11c90b755a0237424df
SHA512 6c3e28cf80cf00f8dc4a6e6dce09d4639e33b1fb3668d3c79fe0c8e5e76004b9ea7caefb35476457ee5dd46a3e70b221ddd5a7504934914ea4d1349c2180e294
SSDEEP 192:L7HTwYWChZKxz5QxEbxBFN11vEGn/Rh8YtI4dyXUveYD7A0UUnig5t2BY5RDzF7s:LLwgKbb/XTdyXqsUNR9tDFoUNDG
TLSH
T138F1971896FC9FF72D1D113FFD6C95064FFE40E0D37159E0A6CA9697E2651C8412B481
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1540	generate-rules

Software Deployment Tools 1 TTPs 1 IoCs

Use software deployment tools to execute code.

execution

Software Deployment Tools

T1072

pid	Process
1542	dpkg-parsechangelog

/tmp/linux-restricted-signatures/debian/scripts/generate-rules
/tmp/linux-restricted-signatures/debian/scripts/generate-rules
1⤵
- System Network Configuration Discovery
PID:1540
- /usr/bin/dpkg-parsechangelog
  dpkg-parsechangelog -SSource
  2⤵
  - Software Deployment Tools
  PID:1542
- - /usr/local/sbin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:1546
- - /usr/local/bin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:1546
- - /usr/sbin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:1546
- - /usr/bin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:1546

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Software Deployment Tools

T1072

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Software Deployment Tools

T1072

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads