37be13ae2b1a396e8a9c77bd01efe6579698a3410c448b1ff23bf19800544d55

Analysis

max time kernel
3s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
27/10/2026, 01:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
freeciv-3.2.6/autogen.sh
Size 8KB
Sample261027-bga1tscd46
SHA256 37be13ae2b1a396e8a9c77bd01efe6579698a3410c448b1ff23bf19800544d55
MD5 72d960a811fa7ffad8c574f44a066b6d
SHA1 222764365f7960d945bcbdd0d5949ceca941d079
SHA512 51fa3cc8de045ce27ba4b75c901877f3b4914c116be5068746d2297da94bc5d7ebf99e08e9acc0cf8e6ce570c89c8fcd6f2625f23c1b1ec5388e54dabd7ac983
SSDEEP 192:jlSzd1zu46DJFVYL4ofpHS3rYVqp8CgrpAannbFxco0u5vnX+Rqm2enD23RMJRvN:RS5ADJ3QNhywpNnnbcoPvnXhm2eD20I0
TLSH
T1AB128507F005C3F0652A2CA11D4C791A3F6C2AEF9A9C3C78F09E7454AB51299A1FB795
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 42 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	ls

/tmp/freeciv-3.2.6/autogen.sh
/tmp/freeciv-3.2.6/autogen.sh
1⤵
PID:815
- /usr/bin/dirname
  dirname /tmp/freeciv-3.2.6/autogen.sh
  2⤵
  PID:816
- /bin/ls
  ls "/usr/local/sbin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:819
- /bin/ls
  ls "/usr/local/bin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:820
- /bin/ls
  ls "/usr/sbin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:821
- /bin/ls
  ls "/usr/bin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:822
- /bin/ls
  ls "/sbin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:823
- /bin/ls
  ls "/bin/autoconf-*"
  2⤵
  - Reads runtime system information
  PID:825
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:829
- /bin/ls
  ls "/usr/local/sbin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:832
- /bin/ls
  ls "/usr/local/bin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:833
- /bin/ls
  ls "/usr/sbin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:834
- /bin/ls
  ls "/usr/bin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:835
- /bin/ls
  ls "/sbin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:836
- /bin/ls
  ls "/bin/autoheader-*"
  2⤵
  - Reads runtime system information
  PID:837
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:839
- /bin/ls
  ls "/usr/local/sbin/automake-*"
  2⤵
  - Reads runtime system information
  PID:842
- /bin/ls
  ls "/usr/local/bin/automake-*"
  2⤵
  - Reads runtime system information
  PID:843
- /bin/ls
  ls "/usr/sbin/automake-*"
  2⤵
  - Reads runtime system information
  PID:844
- /bin/ls
  ls "/usr/bin/automake-*"
  2⤵
  - Reads runtime system information
  PID:845
- /bin/ls
  ls "/sbin/automake-*"
  2⤵
  - Reads runtime system information
  PID:846
- /bin/ls
  ls "/bin/automake-*"
  2⤵
  - Reads runtime system information
  PID:847
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:849
- /bin/ls
  ls "/usr/local/sbin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:852
- /bin/ls
  ls "/usr/local/bin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:853
- /bin/ls
  ls "/usr/sbin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:854
- /bin/ls
  ls "/usr/bin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:855
- /bin/ls
  ls "/sbin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:856
- /bin/ls
  ls "/bin/aclocal-*"
  2⤵
  - Reads runtime system information
  PID:857
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:859
- /bin/ls
  ls "/usr/local/sbin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:862
- /bin/ls
  ls "/usr/local/bin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:863
- /bin/ls
  ls "/usr/sbin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:864
- /bin/ls
  ls "/usr/bin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:865
- /bin/ls
  ls "/sbin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:866
- /bin/ls
  ls "/bin/libtoolize-*"
  2⤵
  - Reads runtime system information
  PID:867
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:869
- /bin/ls
  ls "/usr/local/sbin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:872
- /bin/ls
  ls "/usr/local/bin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:873
- /bin/ls
  ls "/usr/sbin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:874
- /bin/ls
  ls "/usr/bin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:875
- /bin/ls
  ls "/sbin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:876
- /bin/ls
  ls "/bin/glibtoolize-*"
  2⤵
  - Reads runtime system information
  PID:877
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:879
- /usr/bin/python3
  python3 --version
  2⤵
  PID:881
- /bin/grep
  grep -a -v " line "
  2⤵
  PID:884
- /usr/bin/python3
  python3 --version
  2⤵
  PID:883
- /bin/sed
  sed "s/([^)]*)//g;s/^[a-zA-Z\\.\\ \\-]*//;s/ .*\$//"
  2⤵
  - Reads runtime system information
  PID:886
- /usr/bin/head
  head -n 1
  2⤵
  PID:885
- /usr/bin/cut
  cut -d. -f1
  2⤵
  PID:889
- /usr/bin/cut
  cut -d. -f2
  2⤵
  PID:893
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:892
- /usr/bin/cut
  cut -d. -f3
  2⤵
  PID:897
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:896
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:899
- /usr/bin/python3
  python3 --version
  2⤵
  PID:900
- /bin/sed
  sed "s/([^)]*)//g;s/^[a-zA-Z\\.\\ \\-]*//;s/ .*\$//"
  2⤵
  - Reads runtime system information
  PID:905
- /usr/bin/head
  head -n 1
  2⤵
  PID:904
- /bin/grep
  grep -a -v " line "
  2⤵
  PID:903
- /usr/bin/python3
  python3 --version
  2⤵
  PID:902
- /usr/bin/cut
  cut -d. -f1
  2⤵
  PID:908
- /usr/bin/cut
  cut -d. -f2
  2⤵
  PID:912
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:911
- /usr/bin/cut
  cut -d. -f3
  2⤵
  PID:916
- /bin/sed
  sed "s/[-,a-z,A-Z+].*//"
  2⤵
  - Reads runtime system information
  PID:915
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:918
- /usr/bin/tr
  tr -d "\\n"
  2⤵
  PID:921

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads