a1dfe6441b13a8636f0f2d10a2ca82fa8beafc967000c6e1434e74aa4c992912

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
10/11/2026, 04:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/rules
Size 134B
Sample261110-ext1estv9k
SHA256 a1dfe6441b13a8636f0f2d10a2ca82fa8beafc967000c6e1434e74aa4c992912
MD5 e3477167d81b622b9d72acd4c84b7e3f
SHA1 15c0007af60b706b308a1146fd996c0f8a6969dd
SHA512 7edfde307b70dea6a8f6063105e0df39151222daa40a3ed553cbbd9dc51732cbf163949bfc8d5dcf19ad683e2208c676586592b01518b39f996c8f00e3288364
TLSH
T1D7C02B2BC233412441484508A14C06909BD1C1F5ACBC308216F10A7054C2F462461054
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: Unix Shell 1 TTPs 1 IoCs

Execute scripts via Unix Shell.

execution

Unix Shell

T1059.004

pid	Process
656	sh

/tmp/debian/rules
/tmp/debian/rules
1⤵
PID:651
- /bin/sh
  /bin/sh -c "NO_NETWORK=1 dh_auto_test"
  2⤵
  - Command and Scripting Interpreter: Unix Shell
  PID:656

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Unix Shell

T1059.004

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads