Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
15/08/2026, 04:18
Static task
static1
Behavioral task
behavioral1
Sample
debian/rules
Resource
ubuntu1804-amd64-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
debian/rules
Resource
debian9-armhf-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
debian/rules
Resource
debian9-mipsbe-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
debian/rules
Resource
debian9-mipsel-20260513-en
1 signatures
150 seconds
General
- Target debian/rules
- Size 153B
- Sample260815-ew9dqaep61
- SHA256 d3553876ac62b6c1410c367922c43d86e7af3228fdc6430610d154b10b1e90d9
- MD5 1dddc78a5d89af83ca50f01c0085bafc
- SHA1 4bf76b91ec2b354fc209b43388a3bb34fe55905f
- SHA512 0e8c49d928af450bbea9e6d35ad583d2ef36284b2ecc543c9152bbc157aecae7bfd71e6ab29f7309f47b34125ec796c11146259f36a9c2381b07e130b0db326a
- TLSH T1A0C08C32E134183600B89907D29002D0C6E684BAA5EDF8D270F99920959AF08B1B60D8
- MD5 SHA1 SHA512 TLSH
Score
3/10
Malware Config
Signatures
- System Network Configuration Discovery 1 TTPs 6 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 648 dh_auto_build 648 dh_auto_build 648 dh_auto_build 648 dh_auto_build 648 dh_auto_build 648 dh_auto_build
Processes
-
/tmp/debian/rules/tmp/debian/rules1⤵PID:642
-
/usr/local/sbin/dh_auto_builddh_auto_build -- "STRIP=/bin/true"2⤵
- System Network Configuration Discovery
PID:648
-
-
/usr/local/bin/dh_auto_builddh_auto_build -- "STRIP=/bin/true"2⤵
- System Network Configuration Discovery
PID:648
-
-
/usr/sbin/dh_auto_builddh_auto_build -- "STRIP=/bin/true"2⤵
- System Network Configuration Discovery
PID:648
-
-
/usr/bin/dh_auto_builddh_auto_build -- "STRIP=/bin/true"2⤵
- System Network Configuration Discovery
PID:648
-
-
/sbin/dh_auto_builddh_auto_build -- "STRIP=/bin/true"2⤵
- System Network Configuration Discovery
PID:648
-
-
/bin/dh_auto_builddh_auto_build -- "STRIP=/bin/true"2⤵
- System Network Configuration Discovery
PID:648
-