2131f79fa87fc55425bfe5157fe44e93b7c1b878a9757e5e5c8d66366d142c8b

Analysis

max time kernel
0s
max time network
130s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
23/10/2026, 15:24

Target
riff-development/scripts/check-quality.sh
Size 1KB
Sample261023-ss2flact5w
SHA256 2131f79fa87fc55425bfe5157fe44e93b7c1b878a9757e5e5c8d66366d142c8b
MD5 1237719ec8c52d2869615723adb65312
SHA1 50e8a3f0028e5b5f7c6d78286ba0caf30f663bd4
SHA512 4d47b7ae1617bc209ce4622f72baf94deb5d250fcb570b5bd651890144782dbf4d6f9ffa1817a3ffc71462c176ca8d24b1aab9ddee7c6918eb1707321a834e96
TLSH
T1B421009B39A947F4120CBC36A94750A07D3E444F0A185C34719F76B0BF286C466FE3D9
MD5 SHA1 SHA512 TLSH

Score

3^/10

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/riff-development/src/config.rs	bash

/tmp/riff-development/scripts/check-quality.sh
/tmp/riff-development/scripts/check-quality.sh
1⤵
PID:1524

/usr/local/sbin/bash
bash /tmp/riff-development/scripts/check-quality.sh
1⤵
PID:1524

/usr/local/bin/bash
bash /tmp/riff-development/scripts/check-quality.sh
1⤵
PID:1524

/bin/bash
bash /tmp/riff-development/scripts/check-quality.sh
1⤵
- Writes file to tmp directory
PID:1524
- /usr/bin/dirname
  dirname /tmp/riff-development/scripts/check-quality.sh
  2⤵
  PID:1527