d75a627c46278bfdb20ba66523eb260c0cf5ecdccb15a549145b118442bafb2c

Analysis

max time kernel
0s
max time network
130s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
23/07/2026, 08:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
linux-restricted-signatures/debian/scripts/generate-rules
Size 8KB
Sample260723-j8fdmathna
SHA256 d75a627c46278bfdb20ba66523eb260c0cf5ecdccb15a549145b118442bafb2c
MD5 9cb539566a701d89574b6b5c84da976f
SHA1 ac487e07579fc03fb2c4f44669f43008815c4769
SHA512 3f9dad57b7bc2a237420cee3bbd54947cda0fd7260462ef12cd8dda4f1dcc7763539b93a0ef23628fcf252c63d79c0d142933c52136a49ec628d5ebd68cbce66
SSDEEP 192:L7HTwYWChZKxz5QxEbxBFN11vEGh/RYRq8YtI4dyXUveYD7Kmv0UUnig5t2BY5Ri:LLwgKbV1uROTdyXqdUNR9tDFoUNDG
TLSH
T10F029518DAFC9FF7291D113EFD6C99068FFD01D0E37159F1A6CA965BD264288422F482
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1505	generate-rules

Software Deployment Tools 1 TTPs 1 IoCs

Use software deployment tools to execute code.

execution

Software Deployment Tools

T1072

pid	Process
1506	dpkg-parsechangelog

/tmp/linux-restricted-signatures/debian/scripts/generate-rules
/tmp/linux-restricted-signatures/debian/scripts/generate-rules
1⤵
- System Network Configuration Discovery
PID:1505
- /usr/bin/dpkg-parsechangelog
  dpkg-parsechangelog -SSource
  2⤵
  - Software Deployment Tools
  PID:1506
- - /usr/local/sbin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:1509
- - /usr/local/bin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:1509
- - /usr/sbin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:1509
- - /usr/bin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:1509

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Software Deployment Tools

T1072

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Software Deployment Tools

T1072

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads