Analysis

  • max time kernel
    0s
  • max time network
    129s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20260513-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    22/08/2026, 17:16

General

  • Target
    debian/patches/list_uncritical_patches
  • Size 218B
  • Sample260822-vtkwca1zfv
  • SHA256 7c14472af591c5eeddaf05bcf3282509ff0eefde63a9bffad08685bc9088179f
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/debian/patches/list_uncritical_patches
    /tmp/debian/patches/list_uncritical_patches
    1⤵
      PID:1492
      • /usr/bin/find
        find ./ -name "*.patch"
        2⤵
        • Reads runtime system information
        PID:1493
      • /bin/grep
        grep -q -e "^---.*\\.h" ./opt-35_setup-show-valid.patch
        2⤵
          PID:1494
        • /bin/grep
          grep -q -e "^---.*\\.h" ./opt-37-x_menuorg.patch
          2⤵
            PID:1495
          • /usr/bin/basename
            basename ./opt-37-x_menuorg.patch
            2⤵
              PID:1496
            • /bin/grep
              grep -q -e "^---.*\\.h" ./skincurses-log-errors.patch
              2⤵
                PID:1497
              • /usr/bin/basename
                basename ./skincurses-log-errors.patch
                2⤵
                  PID:1498
                • /bin/grep
                  grep -q -e "^---.*\\.h" ./99_ncursesw-include.patch
                  2⤵
                    PID:1500
                  • /usr/bin/basename
                    basename ./99_ncursesw-include.patch
                    2⤵
                      PID:1501
                    • /bin/grep
                      grep -q -e "^---.*\\.h" ./opt-60_power-saving.patch
                      2⤵
                        PID:1502
                      • /bin/grep
                        grep -q -e "^---.*\\.h" ./opt-29_syncearly.patch
                        2⤵
                          PID:1503
                        • /bin/grep
                          grep -q -e "^---.*\\.h" ./12_osdbase-maxitems.patch
                          2⤵
                            PID:1504
                          • /usr/bin/basename
                            basename ./12_osdbase-maxitems.patch
                            2⤵
                              PID:1505
                            • /bin/grep
                              grep -q -e "^---.*\\.h" ./opt-42-x_MainMenuHooks.patch
                              2⤵
                                PID:1506
                              • /bin/grep
                                grep -q -e "^---.*\\.h" ./opt-27_ttxtsubs.patch
                                2⤵
                                  PID:1508
                                • /bin/grep
                                  grep -q -e "^---.*\\.h" ./opt-45_yaepg.patch
                                  2⤵
                                    PID:1509
                                  • /bin/grep
                                    grep -q -e "^---.*\\.h" ./opt-53_dvbsetup.patch
                                    2⤵
                                      PID:1510
                                    • /bin/grep
                                      grep -q -e "^---.*\\.h" ./04_newplugin.patch
                                      2⤵
                                        PID:1511
                                      • /usr/bin/basename
                                        basename ./04_newplugin.patch
                                        2⤵
                                          PID:1512

                                      Network

                                            MITRE ATT&CK Matrix

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads