Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    16/09/2026, 22:11

General

  • Target
    install-azd.sh
  • Size 11KB
  • Sample260916-14b9vaeh49
  • SHA256 db4c841f39d65c5e2df052cd1183463c8230ad1b5448264fa8371928c42b5e85
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/install-azd.sh
    /tmp/install-azd.sh
    1⤵
      PID:643
    • /usr/local/sbin/bash
      bash /tmp/install-azd.sh
      1⤵
        PID:643
      • /usr/local/bin/bash
        bash /tmp/install-azd.sh
        1⤵
          PID:643
        • /usr/sbin/bash
          bash /tmp/install-azd.sh
          1⤵
            PID:643
          • /usr/bin/bash
            bash /tmp/install-azd.sh
            1⤵
              PID:643
            • /sbin/bash
              bash /tmp/install-azd.sh
              1⤵
                PID:643
              • /bin/bash
                bash /tmp/install-azd.sh
                1⤵
                  PID:643
                  • /bin/uname
                    uname -s
                    2⤵
                      PID:653
                    • /bin/uname
                      uname -m
                      2⤵
                        PID:664
                      • /bin/date
                        date -u "+%Y-%m-%dT%H:%M:%S.%NZ"
                        2⤵
                          PID:671
                        • /usr/bin/tr
                          tr "[:upper:]" "[:lower:]"
                          2⤵
                            PID:675
                          • /bin/mkdir
                            mkdir -p /root/.azd
                            2⤵
                            • Reads runtime system information
                            PID:677

                        Network

                              MITRE ATT&CK Matrix

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              installer-error.log

                              • Path /root/.azd/installer-error.log
                              • Size 67B
                              • SHA256 0605000202b9db25713b869ab7b4a2678b600000b49e7f678b10ef8b4f233b09
                              • MD5 SHA1 SHA512 TLSH