d175fd1a5f807c08f5d9f91f30c2af15eb11b9e9ea760be9e2c35f526e1639ef

Analysis

max time kernel
8s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
10/11/2026, 04:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/rules
Size 841B
Sample261110-extdwsgt8t
SHA256 d175fd1a5f807c08f5d9f91f30c2af15eb11b9e9ea760be9e2c35f526e1639ef
MD5 8bc1808797449071ea351528e05b620c
SHA1 5a9bb676669151ce780406b0c0393dc861918919
SHA512 c1eaedae19fb052caad06436e081683b0f5c41828cb3860bd82a81ded6438d192859c69a16ac63588d73fd31f8295fa4b4749cfeb3dfb7e03d02ce246a3abb4c
TLSH
T1C70112C1D1A0667B0C8FC031A30745236DFB20F9E87A738313D81E31A2CB29502E7961
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/filesystems	dpkg

/tmp/debian/rules
/tmp/debian/rules
1⤵
PID:705
- /usr/local/sbin/dpkg-architecture
  dpkg-architecture -qDEB_BUILD_ARCH
  2⤵
  PID:708
- /usr/local/bin/dpkg-architecture
  dpkg-architecture -qDEB_BUILD_ARCH
  2⤵
  PID:708
- /usr/sbin/dpkg-architecture
  dpkg-architecture -qDEB_BUILD_ARCH
  2⤵
  PID:708
- /usr/bin/dpkg-architecture
  dpkg-architecture -qDEB_BUILD_ARCH
  2⤵
  PID:708
- - /usr/local/sbin/dpkg
    dpkg --print-architecture
    3⤵
    PID:730
- - /usr/local/bin/dpkg
    dpkg --print-architecture
    3⤵
    PID:730
- - /usr/sbin/dpkg
    dpkg --print-architecture
    3⤵
    PID:730
- - /usr/bin/dpkg
    dpkg --print-architecture
    3⤵
    - Reads runtime system information
    PID:730
- /usr/local/sbin/dpkg-architecture
  dpkg-architecture -qDEB_HOST_ARCH
  2⤵
  PID:731
- /usr/local/bin/dpkg-architecture
  dpkg-architecture -qDEB_HOST_ARCH
  2⤵
  PID:731
- /usr/sbin/dpkg-architecture
  dpkg-architecture -qDEB_HOST_ARCH
  2⤵
  PID:731
- /usr/bin/dpkg-architecture
  dpkg-architecture -qDEB_HOST_ARCH
  2⤵
  PID:731
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:733
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:733
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:733
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:733
- /usr/local/sbin/dh
  dh /usr/share/dpkg/buildtools.mk
  2⤵
  PID:734
- /usr/local/bin/dh
  dh /usr/share/dpkg/buildtools.mk
  2⤵
  PID:734
- /usr/sbin/dh
  dh /usr/share/dpkg/buildtools.mk
  2⤵
  PID:734
- /usr/bin/dh
  dh /usr/share/dpkg/buildtools.mk
  2⤵
  PID:734
- /sbin/dh
  dh /usr/share/dpkg/buildtools.mk
  2⤵
  PID:734
- /bin/dh
  dh /usr/share/dpkg/buildtools.mk
  2⤵
  PID:734
- /usr/local/sbin/rm
  rm -f nscd
  2⤵
  PID:735
- /usr/local/bin/rm
  rm -f nscd
  2⤵
  PID:735
- /usr/sbin/rm
  rm -f nscd
  2⤵
  PID:735
- /usr/bin/rm
  rm -f nscd
  2⤵
  PID:735
- /sbin/rm
  rm -f nscd
  2⤵
  PID:735
- /bin/rm
  rm -f nscd
  2⤵
  PID:735
- /usr/local/sbin/dh_auto_clean
  dh_auto_clean
  2⤵
  PID:736
- /usr/local/bin/dh_auto_clean
  dh_auto_clean
  2⤵
  PID:736
- /usr/sbin/dh_auto_clean
  dh_auto_clean
  2⤵
  PID:736
- /usr/bin/dh_auto_clean
  dh_auto_clean
  2⤵
  PID:736
- /sbin/dh_auto_clean
  dh_auto_clean
  2⤵
  PID:736
- /bin/dh_auto_clean
  dh_auto_clean
  2⤵
  PID:736

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads