2131f79fa87fc55425bfe5157fe44e93b7c1b878a9757e5e5c8d66366d142c8b

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
23/10/2026, 15:24

Target
riff-development/scripts/check-quality.sh
Size 1KB
Sample261023-ss2flact5w
SHA256 2131f79fa87fc55425bfe5157fe44e93b7c1b878a9757e5e5c8d66366d142c8b
MD5 1237719ec8c52d2869615723adb65312
SHA1 50e8a3f0028e5b5f7c6d78286ba0caf30f663bd4
SHA512 4d47b7ae1617bc209ce4622f72baf94deb5d250fcb570b5bd651890144782dbf4d6f9ffa1817a3ffc71462c176ca8d24b1aab9ddee7c6918eb1707321a834e96
TLSH
T1B421009B39A947F4120CBC36A94750A07D3E444F0A185C34719F76B0BF286C466FE3D9
MD5 SHA1 SHA512 TLSH

Score

3^/10

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/riff-development/src/config.rs	bash

/tmp/riff-development/scripts/check-quality.sh
/tmp/riff-development/scripts/check-quality.sh
1⤵
PID:678

/usr/local/sbin/bash
bash /tmp/riff-development/scripts/check-quality.sh
1⤵
PID:678

/usr/local/bin/bash
bash /tmp/riff-development/scripts/check-quality.sh
1⤵
PID:678

/bin/bash
bash /tmp/riff-development/scripts/check-quality.sh
1⤵
- Writes file to tmp directory
PID:678
- /usr/bin/dirname
  dirname /tmp/riff-development/scripts/check-quality.sh
  2⤵
  PID:681