7c14472af591c5eeddaf05bcf3282509ff0eefde63a9bffad08685bc9088179f

Analysis

max time kernel
1s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
22/08/2026, 17:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/patches/list_uncritical_patches
Size 218B
Sample260822-vtsk7afg22
SHA256 7c14472af591c5eeddaf05bcf3282509ff0eefde63a9bffad08685bc9088179f
MD5 f1c67ae4b57451274df297ed47cbbe59
SHA1 3a71c29506564fc08db2d90c69f299c4e2fbcfe5
SHA512 8167683343add4d66198967b0b2536b4fce5ff0ce01bac053f3312535668e851b228b39200943278b7f61faf70b7cff51b4292729cc87c70b6e4aa890a6c764e
TLSH
T167D0A7F711C85054842751E783833BA55807856F6E015049B54F6074B7911C5B2315A4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/filesystems	find

/tmp/debian/patches/list_uncritical_patches
/tmp/debian/patches/list_uncritical_patches
1⤵
PID:660
- /usr/bin/find
  find ./ -name "*.patch"
  2⤵
  - Reads runtime system information
  PID:662
- /bin/grep
  grep -q -e "^---.*\\.h" ./use-cpp-flags.patch
  2⤵
  PID:664
- /usr/bin/basename
  basename ./use-cpp-flags.patch
  2⤵
  PID:668
- /bin/grep
  grep -q -e "^---.*\\.h" ./opt-53_dvbsetup.patch
  2⤵
  PID:669
- /bin/grep
  grep -q -e "^---.*\\.h" ./12_osdbase-maxitems.patch
  2⤵
  PID:670
- /usr/bin/basename
  basename ./12_osdbase-maxitems.patch
  2⤵
  PID:672
- /bin/grep
  grep -q -e "^---.*\\.h" ./opt-60_power-saving.patch
  2⤵
  PID:674
- /bin/grep
  grep -q -e "^---.*\\.h" ./opt-35_setup-show-valid.patch
  2⤵
  PID:677
- /bin/grep
  grep -q -e "^---.*\\.h" ./opt-27_ttxtsubs.patch
  2⤵
  PID:678
- /bin/grep
  grep -q -e "^---.*\\.h" ./allow-verbose-libsi-build.patch
  2⤵
  PID:679
- /usr/bin/basename
  basename ./allow-verbose-libsi-build.patch
  2⤵
  PID:680
- /bin/grep
  grep -q -e "^---.*\\.h" ./99_ncursesw-include.patch
  2⤵
  PID:681
- /usr/bin/basename
  basename ./99_ncursesw-include.patch
  2⤵
  PID:683
- /bin/grep
  grep -q -e "^---.*\\.h" ./opt-45_yaepg.patch
  2⤵
  PID:684
- /bin/grep
  grep -q -e "^---.*\\.h" ./opt-37-x_menuorg.patch
  2⤵
  PID:685
- /usr/bin/basename
  basename ./opt-37-x_menuorg.patch
  2⤵
  PID:686
- /bin/grep
  grep -q -e "^---.*\\.h" ./configurable-pkg-config.patch
  2⤵
  PID:687
- /usr/bin/basename
  basename ./configurable-pkg-config.patch
  2⤵
  PID:688
- /bin/grep
  grep -q -e "^---.*\\.h" ./skincurses-log-errors.patch
  2⤵
  PID:689
- /usr/bin/basename
  basename ./skincurses-log-errors.patch
  2⤵
  PID:690
- /bin/grep
  grep -q -e "^---.*\\.h" ./opt-42-x_MainMenuHooks.patch
  2⤵
  PID:691
- /bin/grep
  grep -q -e "^---.*\\.h" ./04_newplugin.patch
  2⤵
  PID:692
- /usr/bin/basename
  basename ./04_newplugin.patch
  2⤵
  PID:693
- /bin/grep
  grep -q -e "^---.*\\.h" ./opt-29_syncearly.patch
  2⤵
  PID:694

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads