Analysis

  • max time kernel
    3s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20260513-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    22/08/2026, 17:17

General

  • Target
    debian/patches/list_uncritical_patches
  • Size 218B
  • Sample260822-vtsk7afg22
  • SHA256 7c14472af591c5eeddaf05bcf3282509ff0eefde63a9bffad08685bc9088179f
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/debian/patches/list_uncritical_patches
    /tmp/debian/patches/list_uncritical_patches
    1⤵
      PID:721
      • /usr/bin/find
        find ./ -name "*.patch"
        2⤵
        • Reads runtime system information
        PID:724
      • /bin/grep
        grep -q -e "^---.*\\.h" ./opt-35_setup-show-valid.patch
        2⤵
          PID:727
        • /bin/grep
          grep -q -e "^---.*\\.h" ./opt-42-x_MainMenuHooks.patch
          2⤵
            PID:730
          • /bin/grep
            grep -q -e "^---.*\\.h" ./opt-29_syncearly.patch
            2⤵
              PID:734
            • /bin/grep
              grep -q -e "^---.*\\.h" ./12_osdbase-maxitems.patch
              2⤵
                PID:739
              • /usr/bin/basename
                basename ./12_osdbase-maxitems.patch
                2⤵
                  PID:740
                • /bin/grep
                  grep -q -e "^---.*\\.h" ./opt-27_ttxtsubs.patch
                  2⤵
                    PID:741
                  • /bin/grep
                    grep -q -e "^---.*\\.h" ./allow-verbose-libsi-build.patch
                    2⤵
                      PID:743
                    • /usr/bin/basename
                      basename ./allow-verbose-libsi-build.patch
                      2⤵
                        PID:745
                      • /bin/grep
                        grep -q -e "^---.*\\.h" ./opt-60_power-saving.patch
                        2⤵
                          PID:746
                        • /bin/grep
                          grep -q -e "^---.*\\.h" ./opt-45_yaepg.patch
                          2⤵
                            PID:747
                          • /bin/grep
                            grep -q -e "^---.*\\.h" ./configurable-pkg-config.patch
                            2⤵
                              PID:749
                            • /usr/bin/basename
                              basename ./configurable-pkg-config.patch
                              2⤵
                                PID:752
                              • /bin/grep
                                grep -q -e "^---.*\\.h" ./opt-37-x_menuorg.patch
                                2⤵
                                  PID:753
                                • /usr/bin/basename
                                  basename ./opt-37-x_menuorg.patch
                                  2⤵
                                    PID:754
                                  • /bin/grep
                                    grep -q -e "^---.*\\.h" ./opt-53_dvbsetup.patch
                                    2⤵
                                      PID:755
                                    • /bin/grep
                                      grep -q -e "^---.*\\.h" ./04_newplugin.patch
                                      2⤵
                                        PID:757
                                      • /usr/bin/basename
                                        basename ./04_newplugin.patch
                                        2⤵
                                          PID:758
                                        • /bin/grep
                                          grep -q -e "^---.*\\.h" ./99_ncursesw-include.patch
                                          2⤵
                                            PID:759
                                          • /usr/bin/basename
                                            basename ./99_ncursesw-include.patch
                                            2⤵
                                              PID:760
                                            • /bin/grep
                                              grep -q -e "^---.*\\.h" ./use-cpp-flags.patch
                                              2⤵
                                                PID:762
                                              • /usr/bin/basename
                                                basename ./use-cpp-flags.patch
                                                2⤵
                                                  PID:763
                                                • /bin/grep
                                                  grep -q -e "^---.*\\.h" ./skincurses-log-errors.patch
                                                  2⤵
                                                    PID:764
                                                  • /usr/bin/basename
                                                    basename ./skincurses-log-errors.patch
                                                    2⤵
                                                      PID:765

                                                  Network

                                                        MITRE ATT&CK Matrix

                                                        Replay Monitor

                                                        Loading Replay Monitor...

                                                        Downloads