37be13ae2b1a396e8a9c77bd01efe6579698a3410c448b1ff23bf19800544d55

Analysis

max time kernel
3s
platform
debian-9_mips
resource
debian9-mipsbe-20260513-en
resource tags

arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
27/10/2026, 01:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
freeciv-3.2.6/autogen.sh
Size 8KB
Sample261027-bga1tscd46
SHA256 37be13ae2b1a396e8a9c77bd01efe6579698a3410c448b1ff23bf19800544d55
MD5 72d960a811fa7ffad8c574f44a066b6d
SHA1 222764365f7960d945bcbdd0d5949ceca941d079
SHA512 51fa3cc8de045ce27ba4b75c901877f3b4914c116be5068746d2297da94bc5d7ebf99e08e9acc0cf8e6ce570c89c8fcd6f2625f23c1b1ec5388e54dabd7ac983
SSDEEP 192:jlSzd1zu46DJFVYL4ofpHS3rYVqp8CgrpAannbFxco0u5vnX+Rqm2enD23RMJRvN:RS5ADJ3QNhywpNnnbcoPvnXhm2eD20I0
TLSH
T1AB128507F005C3F0652A2CA11D4C791A3F6C2AEF9A9C3C78F09E7454AB51299A1FB795
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 42 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls

/tmp/freeciv-3.2.6/autogen.sh
/tmp/freeciv-3.2.6/autogen.sh
1⤵
PID:808
- /usr/bin/dirname
  dirname /tmp/freeciv-3.2.6/autogen.sh
  2⤵
  PID:809
- /bin/ls
  ls "/usr/local/sbin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:812
- /bin/ls
  ls "/usr/local/bin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:813
- /bin/ls
  ls "/usr/sbin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:814
- /bin/ls
  ls "/usr/bin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:815
- /bin/ls
  ls "/sbin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:817
- /bin/ls
  ls "/bin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:821
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:823
- /bin/ls
  ls "/usr/local/sbin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:826
- /bin/ls
  ls "/usr/local/bin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:827
- /bin/ls
  ls "/usr/sbin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:828
- /bin/ls
  ls "/usr/bin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:829
- /bin/ls
  ls "/sbin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:830
- /bin/ls
  ls "/bin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:831
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:833
- /bin/ls
  ls "/usr/local/sbin/automake-*"
  2⤵
  - Reads runtime system information
  PID:836
- /bin/ls
  ls "/usr/local/bin/automake-*"
  2⤵
  - Reads runtime system information
  PID:837
- /bin/ls
  ls "/usr/sbin/automake-*"
  2⤵
  - Reads runtime system information
  PID:838
- /bin/ls
  ls "/usr/bin/automake-*"
  2⤵
  - Reads runtime system information
  PID:839
- /bin/ls
  ls "/sbin/automake-*"
  2⤵
  - Reads runtime system information
  PID:840
- /bin/ls
  ls "/bin/automake-*"
  2⤵
  - Reads runtime system information
  PID:841
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:843
- /bin/ls
  ls "/usr/local/sbin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:846
- /bin/ls
  ls "/usr/local/bin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:847
- /bin/ls
  ls "/usr/sbin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:848
- /bin/ls
  ls "/usr/bin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:849
- /bin/ls
  ls "/sbin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:850
- /bin/ls
  ls "/bin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:851
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:853
- /bin/ls
  ls "/usr/local/sbin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:856
- /bin/ls
  ls "/usr/local/bin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:857
- /bin/ls
  ls "/usr/sbin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:858
- /bin/ls
  ls "/usr/bin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:859
- /bin/ls
  ls "/sbin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:860
- /bin/ls
  ls "/bin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:861
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:863
- /bin/ls
  ls "/usr/local/sbin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:866
- /bin/ls
  ls "/usr/local/bin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:867
- /bin/ls
  ls "/usr/sbin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:868
- /bin/ls
  ls "/usr/bin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:869
- /bin/ls
  ls "/sbin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:870
- /bin/ls
  ls "/bin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:871
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:873
- /usr/bin/python3
  python3 --version
  2⤵
  PID:875
- /usr/bin/python3
  python3 --version
  2⤵
  PID:877
- /usr/bin/head
  head -n 1
  2⤵
  PID:879
- /bin/grep
  grep -a -v " line "
  2⤵
  PID:878
- /bin/sed
  sed "s/([^)]*)//g;s/^[a-zA-Z\\.\\ \\-]*//;s/ .*\$//"
  2⤵
  - Reads runtime system information
  PID:880
- /usr/bin/cut
  cut -d. -f1
  2⤵
  PID:883
- /usr/bin/cut
  cut -d. -f2
  2⤵
  PID:887
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:886
- /usr/bin/cut
  cut -d. -f3
  2⤵
  PID:891
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:890
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:893
- /usr/bin/python3
  python3 --version
  2⤵
  PID:894
- /usr/bin/head
  head -n 1
  2⤵
  PID:898
- /bin/sed
  sed "s/([^)]*)//g;s/^[a-zA-Z\\.\\ \\-]*//;s/ .*\$//"
  2⤵
  - Reads runtime system information
  PID:899
- /bin/grep
  grep -a -v " line "
  2⤵
  PID:897
- /usr/bin/python3
  python3 --version
  2⤵
  PID:896
- /usr/bin/cut
  cut -d. -f1
  2⤵
  PID:902
- /usr/bin/cut
  cut -d. -f2
  2⤵
  PID:906
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:905
- /usr/bin/cut
  cut -d. -f3
  2⤵
  PID:910
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:909
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:912
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:915

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads