Analysis

  • max time kernel
    0s
  • max time network
    129s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20260513-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    22/08/2026, 17:17

General

  • Target
    debian/patches/list_uncritical_patches
  • Size 218B
  • Sample260822-vtsk7afg22
  • SHA256 7c14472af591c5eeddaf05bcf3282509ff0eefde63a9bffad08685bc9088179f
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/debian/patches/list_uncritical_patches
    /tmp/debian/patches/list_uncritical_patches
    1⤵
      PID:1483
      • /usr/bin/find
        find ./ -name "*.patch"
        2⤵
        • Reads runtime system information
        PID:1484
      • /bin/grep
        grep -q -e "^---.*\\.h" ./configurable-pkg-config.patch
        2⤵
          PID:1485
        • /usr/bin/basename
          basename ./configurable-pkg-config.patch
          2⤵
            PID:1488
          • /bin/grep
            grep -q -e "^---.*\\.h" ./opt-35_setup-show-valid.patch
            2⤵
              PID:1489
            • /bin/grep
              grep -q -e "^---.*\\.h" ./opt-37-x_menuorg.patch
              2⤵
                PID:1490
              • /usr/bin/basename
                basename ./opt-37-x_menuorg.patch
                2⤵
                  PID:1491
                • /bin/grep
                  grep -q -e "^---.*\\.h" ./skincurses-log-errors.patch
                  2⤵
                    PID:1492
                  • /usr/bin/basename
                    basename ./skincurses-log-errors.patch
                    2⤵
                      PID:1493
                    • /bin/grep
                      grep -q -e "^---.*\\.h" ./99_ncursesw-include.patch
                      2⤵
                        PID:1494
                      • /usr/bin/basename
                        basename ./99_ncursesw-include.patch
                        2⤵
                          PID:1495
                        • /bin/grep
                          grep -q -e "^---.*\\.h" ./opt-60_power-saving.patch
                          2⤵
                            PID:1496
                          • /bin/grep
                            grep -q -e "^---.*\\.h" ./opt-29_syncearly.patch
                            2⤵
                              PID:1497
                            • /bin/grep
                              grep -q -e "^---.*\\.h" ./12_osdbase-maxitems.patch
                              2⤵
                                PID:1498
                              • /usr/bin/basename
                                basename ./12_osdbase-maxitems.patch
                                2⤵
                                  PID:1499
                                • /bin/grep
                                  grep -q -e "^---.*\\.h" ./allow-verbose-libsi-build.patch
                                  2⤵
                                    PID:1500
                                  • /usr/bin/basename
                                    basename ./allow-verbose-libsi-build.patch
                                    2⤵
                                      PID:1501
                                    • /bin/grep
                                      grep -q -e "^---.*\\.h" ./opt-42-x_MainMenuHooks.patch
                                      2⤵
                                        PID:1502
                                      • /bin/grep
                                        grep -q -e "^---.*\\.h" ./opt-27_ttxtsubs.patch
                                        2⤵
                                          PID:1503
                                        • /bin/grep
                                          grep -q -e "^---.*\\.h" ./opt-45_yaepg.patch
                                          2⤵
                                            PID:1505
                                          • /bin/grep
                                            grep -q -e "^---.*\\.h" ./opt-53_dvbsetup.patch
                                            2⤵
                                              PID:1506
                                            • /bin/grep
                                              grep -q -e "^---.*\\.h" ./04_newplugin.patch
                                              2⤵
                                                PID:1507
                                              • /usr/bin/basename
                                                basename ./04_newplugin.patch
                                                2⤵
                                                  PID:1508
                                                • /bin/grep
                                                  grep -q -e "^---.*\\.h" ./use-cpp-flags.patch
                                                  2⤵
                                                    PID:1509
                                                  • /usr/bin/basename
                                                    basename ./use-cpp-flags.patch
                                                    2⤵
                                                      PID:1510

                                                  Network

                                                        MITRE ATT&CK Matrix

                                                        Replay Monitor

                                                        Loading Replay Monitor...

                                                        Downloads