c0338098b313b49bbefc6bdae1beaf1b768ecd87d23cfae2a3908573cb8ebb2a

Analysis

max time kernel
2s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
10/11/2026, 05:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/rules
Size 1KB
Sample261110-frnrwsda52
SHA256 c0338098b313b49bbefc6bdae1beaf1b768ecd87d23cfae2a3908573cb8ebb2a
MD5 7b29c6ed806cc86b39f6a9849682804e
SHA1 68cd9c9a350dd12343e47817d6d92f83a78eaebc
SHA512 ce6e8c482a519e5bc0e0bb79b9a0ad5999abaa7c7340a1a9634b830652b08045742c7c236542aaf0b37d9dc7d91d751575fc6eb912ff28c81f6c8fbbb448402e
TLSH
T19511F062C0B231B930A28994B711C1556FB3E1D67FE67AC5F1D9271823C6B12F42B1B4
MD5 SHA1 SHA512 TLSH

Score

2^/10

execution

Malware Config

Signatures

Software Deployment Tools 1 TTPs 1 IoCs

Use software deployment tools to execute code.

execution

Software Deployment Tools

T1072

pid	Process
660	dpkg-parsechangelog

/tmp/debian/rules
/tmp/debian/rules
1⤵
PID:653
- /usr/local/sbin/dpkg-parsechangelog
  dpkg-parsechangelog -STimestamp
  2⤵
  PID:660
- /usr/local/bin/dpkg-parsechangelog
  dpkg-parsechangelog -STimestamp
  2⤵
  PID:660
- /usr/sbin/dpkg-parsechangelog
  dpkg-parsechangelog -STimestamp
  2⤵
  PID:660
- /usr/bin/dpkg-parsechangelog
  dpkg-parsechangelog -STimestamp
  2⤵
  - Software Deployment Tools
  PID:660
- - /usr/local/sbin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:679
- - /usr/local/bin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:679
- - /usr/sbin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:679
- - /usr/bin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:679
- /usr/local/sbin/dh_auto_clean
  dh_auto_clean
  2⤵
  PID:680
- /usr/local/bin/dh_auto_clean
  dh_auto_clean
  2⤵
  PID:680
- /usr/sbin/dh_auto_clean
  dh_auto_clean
  2⤵
  PID:680
- /usr/bin/dh_auto_clean
  dh_auto_clean
  2⤵
  PID:680
- /sbin/dh_auto_clean
  dh_auto_clean
  2⤵
  PID:680
- /bin/dh_auto_clean
  dh_auto_clean
  2⤵
  PID:680

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Software Deployment Tools

T1072

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Software Deployment Tools

T1072

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads