e65e1baa0be7719a734784ad9c127c8b825352728916bc0af880ed89b44fcc71

Analysis

max time kernel
1s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
30/10/2026, 00:13

Target
sg_mac_ins.sh
Size 2KB
Sample261030-ahymvatzcs
SHA256 e65e1baa0be7719a734784ad9c127c8b825352728916bc0af880ed89b44fcc71
MD5 070d668aedf7785f63390ef04141d4fb
SHA1 92e57b4182743ab3b5a9294d122140a0d4cdf375
SHA512 345ff8054d5b8b2271c961a3bf45c4934881f47051c896b79e9b7c4963f3e20c0290d631eb7a18b98b643c4e6522e56a848820ad3a38488c307450b5809269b5
TLSH
T19F4143E5A9F042A49BCED0682A25D0C72031C27F0AE1F5802CE592ED9AFB53E1226D16
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/maps	awk

/tmp/sg_mac_ins.sh
/tmp/sg_mac_ins.sh
1⤵
PID:645
- /usr/bin/clear
  clear
  2⤵
  PID:649
- /bin/grep
  grep 确定
  2⤵
  PID:659
- /usr/bin/tr
  tr -C -d a-zA-Z0-9
  2⤵
  PID:662
- /usr/bin/cut
  cut -f 3 -d :
  2⤵
  PID:661
- /usr/bin/awk
  awk "/Serial/ {print \$4}"
  2⤵
  - Reads runtime system information
  PID:671