Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
10/09/2026, 18:18
Static task
static1
Behavioral task
behavioral1
Sample
debian/rules
Resource
ubuntu1804-amd64-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
debian/rules
Resource
debian9-armhf-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
debian/rules
Resource
debian9-mipsbe-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
debian/rules
Resource
debian9-mipsel-20260513-en
1 signatures
150 seconds
General
- Target debian/rules
- Size 3KB
- Sample260910-wxt4vswwgw
- SHA256 77c4f4e00188e9d7191676c912f2045618366f18f7d3cc9e1ca049f6b64cce08
- MD5 51e775ae6a92e5672dce1215c5db062c
- SHA1 511e9320d48b129e69b368b076b94b29cf44d621
- SHA512 b831ffb594d6bb5380b93877338e76e43d6556f9bfebe640379de129604647fd778ddec9550fa0bc0e12e8d9ac344428cdf3e83885e0f3d702b275cbf64e1700
- TLSH T19E51028FEE594A703DE11260A6DB21546B6716BD20BDECE3E0D79435320561A053E6FC
- MD5 SHA1 SHA512 TLSH
Score
3/10
Malware Config
Signatures
- Command and Scripting Interpreter: Unix Shell 1 TTPs 3 IoCs
Execute scripts via Unix Shell.
pid Process 659 sh 661 sh 663 sh
Processes
-
/tmp/debian/rules/tmp/debian/rules1⤵PID:653
-
/bin/sh/bin/sh -c "# In case we're installing to a non-standard location, look for a setup.sh"2⤵
- Command and Scripting Interpreter: Unix Shell
PID:659
-
-
/bin/sh/bin/sh -c "# in the install tree and source it. It will set things like"2⤵
- Command and Scripting Interpreter: Unix Shell
PID:661
-
-
/bin/sh/bin/sh -c "# CMAKE_PREFIX_PATH, PKG_CONFIG_PATH, and PYTHONPATH."2⤵
- Command and Scripting Interpreter: Unix Shell
PID:663
-
-
/bin/sh/bin/sh -c "if [ -f \"/opt/ros/rolling/setup.sh\" ]; then . \"/opt/ros/rolling/setup.sh\"; fi && \\ dh_auto_configure -- \\ -DCMAKE_INSTALL_PREFIX=\"/opt/ros/rolling\" \\ -DAMENT_PREFIX_PATH=\"/opt/ros/rolling\" \\ -DCMAKE_PREFIX_PATH=\"/opt/ros/rolling\" \\ "2⤵PID:666
-