Analysis

  • max time kernel
    26s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20260513-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    23/10/2026, 15:24

General

  • Target
    riff-development/scripts/check-quality.sh
  • Size 1KB
  • Sample261023-ss2flact5w
  • SHA256 2131f79fa87fc55425bfe5157fe44e93b7c1b878a9757e5e5c8d66366d142c8b
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/riff-development/scripts/check-quality.sh
    /tmp/riff-development/scripts/check-quality.sh
    1⤵
      PID:715
    • /usr/local/sbin/bash
      bash /tmp/riff-development/scripts/check-quality.sh
      1⤵
        PID:715
      • /usr/local/bin/bash
        bash /tmp/riff-development/scripts/check-quality.sh
        1⤵
          PID:715
        • /usr/sbin/bash
          bash /tmp/riff-development/scripts/check-quality.sh
          1⤵
            PID:715
          • /usr/bin/bash
            bash /tmp/riff-development/scripts/check-quality.sh
            1⤵
              PID:715
            • /sbin/bash
              bash /tmp/riff-development/scripts/check-quality.sh
              1⤵
                PID:715
              • /bin/bash
                bash /tmp/riff-development/scripts/check-quality.sh
                1⤵
                • Writes file to tmp directory
                PID:715
                • /usr/bin/dirname
                  dirname /tmp/riff-development/scripts/check-quality.sh
                  2⤵
                    PID:721

                Network

                      MITRE ATT&CK Matrix

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads