704462fa073a2fb72ea73f543e844427a67890276908b7eb3277c3913e64e0c9

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
02/10/2026, 07:15

Target
704462fa073a2fb72ea73f543e844427a67890276908b7eb3277c3913e64e0c9.sh
Size 905B
Sample261002-h3c6mswt3n
SHA256 704462fa073a2fb72ea73f543e844427a67890276908b7eb3277c3913e64e0c9
MD5 92f49ec745b4fc49b3ac19240103be40
SHA1 63c8df177059c17dadf85dd179b20152fe56d1b1
SHA512 715c82923e89250af600cc0df1eb18ed16e238c9e8a967c23bcae14cd594a287260d4d6d42902f90306c1babb48e81444c46c3137b0a7e64d0eb523509c58876
TLSH
T1DB11BCF1F9B8C435315A81BEBD4CB220BD82A92F15222C6684232E27909E6CE311E935
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Reads runtime system information 4 IoCs

Reads data from /proc virtual filesystem.

/tmp/704462fa073a2fb72ea73f543e844427a67890276908b7eb3277c3913e64e0c9.sh
/tmp/704462fa073a2fb72ea73f543e844427a67890276908b7eb3277c3913e64e0c9.sh
1⤵
PID:647
- /bin/hostname
  hostname
  2⤵
  PID:649
- /bin/uname
  uname -r
  2⤵
  PID:650
- /bin/uname
  uname -m
  2⤵
  PID:652
- /bin/cat
  cat /etc/os-release
  2⤵
  PID:656
- /bin/sed
  sed -n "s/^ID=//p"
  2⤵
  - Reads runtime system information
  PID:657
- /bin/readlink
  readlink -f /sbin/init
  2⤵
  PID:661
- /usr/bin/who
  who
  2⤵
  PID:682
- /usr/bin/wc
  wc -l
  2⤵
  PID:683
- /usr/bin/cut
  cut -d. -f1 /proc/uptime
  2⤵
  - Reads runtime system information
  PID:685
- /usr/bin/tr
  tr -d " kB"
  2⤵
  PID:688
- /bin/sed
  sed -n "s/^MemTotal: *//p" /proc/meminfo
  2⤵
  - Reads runtime system information
  PID:687