350bf89e9742cded5d7a02a23acb9df5ce2516bef5086aab316da036f88b4177

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
30/09/2026, 20:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.unx.orig
Size 28KB
Sample260930-ysdmestgqa
SHA256 350bf89e9742cded5d7a02a23acb9df5ce2516bef5086aab316da036f88b4177
MD5 e566e36c55908c4b9cbe4cc7333d0d48
SHA1 decf58ce08765a5cda3605efd9f78d68262c2f32
SHA512 6e8895717b52220e83ade9d6e6b206684c52776d4888fca3d3fe93fb368a552e5a8c94aeafb9271bb046a3bf4ad2ce5d963f98bb1575405b756f65074c0d0604
SSDEEP 384:9CrJd/wabxqlwkZ5g/kp52H9PO11uYdSPM8OBjQaU1J/VmJQwPF6ZLoxQh5jH3ZA:4rsGY6jdW11uYiM8kQfn0Qk6mQhVHtA
TLSH
T1B5D2B523A945D67B0B0B00A5275DB44C7325405F4B24E0EE3B9CA92B7F6594C42AFAFF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 3 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/version	grep
File opened for reading	/proc/version	grep
File opened for reading	/proc/version	cat

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
762	generate_boot_scripts.sh.unx.orig

/tmp/products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.unx.orig
/tmp/products/cfgwizard__94608__prt__xx__sp0__1/Config/level_root/generate_boot_scripts.sh.unx.orig
1⤵
- System Network Configuration Discovery
PID:762
- /bin/uname
  uname -s
  2⤵
  PID:763
- /bin/grep
  grep -i "Red Hat" /proc/version
  2⤵
  - Reads runtime system information
  PID:764
- /bin/grep
  grep -i "SUSE Linux" /proc/version
  2⤵
  - Reads runtime system information
  PID:765
- /bin/cat
  cat /proc/version
  2⤵
  - Reads runtime system information
  PID:766

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads