37be13ae2b1a396e8a9c77bd01efe6579698a3410c448b1ff23bf19800544d55

Analysis

max time kernel
0s
max time network
135s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
27/10/2026, 01:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
freeciv-3.2.6/autogen.sh
Size 8KB
Sample261027-bga1tscd46
SHA256 37be13ae2b1a396e8a9c77bd01efe6579698a3410c448b1ff23bf19800544d55
MD5 72d960a811fa7ffad8c574f44a066b6d
SHA1 222764365f7960d945bcbdd0d5949ceca941d079
SHA512 51fa3cc8de045ce27ba4b75c901877f3b4914c116be5068746d2297da94bc5d7ebf99e08e9acc0cf8e6ce570c89c8fcd6f2625f23c1b1ec5388e54dabd7ac983
SSDEEP 192:jlSzd1zu46DJFVYL4ofpHS3rYVqp8CgrpAannbFxco0u5vnX+Rqm2enD23RMJRvN:RS5ADJ3QNhywpNnnbcoPvnXhm2eD20I0
TLSH
T1AB128507F005C3F0652A2CA11D4C791A3F6C2AEF9A9C3C78F09E7454AB51299A1FB795
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 54 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls

/tmp/freeciv-3.2.6/autogen.sh
/tmp/freeciv-3.2.6/autogen.sh
1⤵
PID:1568
- /usr/bin/dirname
  dirname /tmp/freeciv-3.2.6/autogen.sh
  2⤵
  PID:1569
- /bin/ls
  ls "/usr/local/sbin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:1572
- /bin/ls
  ls "/usr/local/bin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:1573
- /bin/ls
  ls "/usr/sbin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:1574
- /bin/ls
  ls "/usr/bin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:1575
- /bin/ls
  ls "/sbin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:1576
- /bin/ls
  ls "/bin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:1577
- /bin/ls
  ls "/snap/bin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:1578
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:1580
- /bin/ls
  ls "/usr/local/sbin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:1583
- /bin/ls
  ls "/usr/local/bin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:1584
- /bin/ls
  ls "/usr/sbin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:1585
- /bin/ls
  ls "/usr/bin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:1586
- /bin/ls
  ls "/sbin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:1587
- /bin/ls
  ls "/bin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:1588
- /bin/ls
  ls "/snap/bin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:1589
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:1591
- /bin/ls
  ls "/usr/local/sbin/automake-*"
  2⤵
  - Reads runtime system information
  PID:1594
- /bin/ls
  ls "/usr/local/bin/automake-*"
  2⤵
  - Reads runtime system information
  PID:1595
- /bin/ls
  ls "/usr/sbin/automake-*"
  2⤵
  - Reads runtime system information
  PID:1596
- /bin/ls
  ls "/usr/bin/automake-*"
  2⤵
  - Reads runtime system information
  PID:1597
- /bin/ls
  ls "/sbin/automake-*"
  2⤵
  - Reads runtime system information
  PID:1598
- /bin/ls
  ls "/bin/automake-*"
  2⤵
  - Reads runtime system information
  PID:1599
- /bin/ls
  ls "/snap/bin/automake-*"
  2⤵
  - Reads runtime system information
  PID:1600
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:1602
- /bin/ls
  ls "/usr/local/sbin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:1605
- /bin/ls
  ls "/usr/local/bin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:1606
- /bin/ls
  ls "/usr/sbin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:1607
- /bin/ls
  ls "/usr/bin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:1608
- /bin/ls
  ls "/sbin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:1609
- /bin/ls
  ls "/bin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:1610
- /bin/ls
  ls "/snap/bin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:1611
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:1613
- /bin/ls
  ls "/usr/local/sbin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:1616
- /bin/ls
  ls "/usr/local/bin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:1617
- /bin/ls
  ls "/usr/sbin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:1618
- /bin/ls
  ls "/usr/bin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:1619
- /bin/ls
  ls "/sbin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:1620
- /bin/ls
  ls "/bin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:1621
- /bin/ls
  ls "/snap/bin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:1622
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:1624
- /bin/ls
  ls "/usr/local/sbin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:1627
- /bin/ls
  ls "/usr/local/bin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:1628
- /bin/ls
  ls "/usr/sbin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:1629
- /bin/ls
  ls "/usr/bin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:1630
- /bin/ls
  ls "/sbin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:1631
- /bin/ls
  ls "/bin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:1636
- /bin/ls
  ls "/snap/bin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:1637
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:1639
- /usr/bin/python3
  python3 --version
  2⤵
  PID:1641
- /bin/sed
  sed "s/([^)]*)//g;s/^[a-zA-Z\\.\\ \\-]*//;s/ .*\$//"
  2⤵
  - Reads runtime system information
  PID:1646
- /usr/bin/head
  head -n 1
  2⤵
  PID:1645
- /bin/grep
  grep -a -v " line "
  2⤵
  PID:1644
- /usr/bin/python3
  python3 --version
  2⤵
  PID:1643
- /usr/bin/cut
  cut -d. -f1
  2⤵
  PID:1649
- /usr/bin/cut
  cut -d. -f2
  2⤵
  PID:1653
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:1652
- /usr/bin/cut
  cut -d. -f3
  2⤵
  PID:1657
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:1656
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:1659
- /usr/bin/python3
  python3 --version
  2⤵
  PID:1660
- /bin/sed
  sed "s/([^)]*)//g;s/^[a-zA-Z\\.\\ \\-]*//;s/ .*\$//"
  2⤵
  - Reads runtime system information
  PID:1665
- /usr/bin/head
  head -n 1
  2⤵
  PID:1664
- /bin/grep
  grep -a -v " line "
  2⤵
  PID:1663
- /usr/bin/python3
  python3 --version
  2⤵
  PID:1662
- /usr/bin/cut
  cut -d. -f1
  2⤵
  PID:1668
- /usr/bin/cut
  cut -d. -f2
  2⤵
  PID:1672
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:1671
- /usr/bin/cut
  cut -d. -f3
  2⤵
  PID:1676
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:1675
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:1678
- /usr/bin/xgettext
  xgettext --version
  2⤵
  PID:1679
- /bin/sed
  sed "s/([^)]*)//g;s/^[a-zA-Z\\.\\ \\-]*//;s/ .*\$//"
  2⤵
  - Reads runtime system information
  PID:1684
- /usr/bin/head
  head -n 1
  2⤵
  PID:1683
- /bin/grep
  grep -a -v " line "
  2⤵
  PID:1682
- /usr/bin/xgettext
  xgettext --version
  2⤵
  PID:1681
- /usr/bin/cut
  cut -d. -f1
  2⤵
  PID:1687
- /usr/bin/cut
  cut -d. -f2
  2⤵
  PID:1691
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:1690
- /usr/bin/cut
  cut -d. -f3
  2⤵
  PID:1695
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:1694
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:1697
- /usr/bin/msgfmt
  msgfmt --version
  2⤵
  PID:1698
- /bin/sed
  sed "s/([^)]*)//g;s/^[a-zA-Z\\.\\ \\-]*//;s/ .*\$//"
  2⤵
  - Reads runtime system information
  PID:1703
- /usr/bin/head
  head -n 1
  2⤵
  PID:1702
- /bin/grep
  grep -a -v " line "
  2⤵
  PID:1701
- /usr/bin/msgfmt
  msgfmt --version
  2⤵
  PID:1700
- /usr/bin/cut
  cut -d. -f1
  2⤵
  PID:1706
- /usr/bin/cut
  cut -d. -f2
  2⤵
  PID:1710
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:1709
- /usr/bin/cut
  cut -d. -f3
  2⤵
  PID:1714
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:1713

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads