44884999e961082cb9092d6e83e37429bd3470bb9ba2b4e5557c28d4e2d85494

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
10/11/2026, 06:19

Target
debian/rules
Size 163B
Sample261110-g3cdnsvs2j
SHA256 44884999e961082cb9092d6e83e37429bd3470bb9ba2b4e5557c28d4e2d85494
MD5 52af57386983f7e4ad1a3d3c5bca3be3
SHA1 d3320890bf136094e8200d59c870bd5e4796234b
SHA512 397d7065721fd52e622abbf80bc4a04dd5a0d40a711ac06aa6a2f70ba16137e58ca8d209a1aecee18537532ded7c6adf4cd10b181cb55ab003cfb3480e4ec067
TLSH
T129C08C3BAD02F8B185842B1E726CD2607714F2A22336685CE829152272B8A053001DAF
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/filesystems	mkdir

/tmp/debian/rules
/tmp/debian/rules
1⤵
PID:1537
- /usr/local/sbin/mkdir
  mkdir -p ../tarballs
  2⤵
  PID:1538
- /usr/local/bin/mkdir
  mkdir -p ../tarballs
  2⤵
  PID:1538
- /usr/sbin/mkdir
  mkdir -p ../tarballs
  2⤵
  PID:1538
- /usr/bin/mkdir
  mkdir -p ../tarballs
  2⤵
  PID:1538
- /sbin/mkdir
  mkdir -p ../tarballs
  2⤵
  PID:1538
- /bin/mkdir
  mkdir -p ../tarballs
  2⤵
  - Reads runtime system information
  PID:1538
- /usr/local/sbin/uscan
  uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
  2⤵
  PID:1539
- /usr/local/bin/uscan
  uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
  2⤵
  PID:1539
- /usr/sbin/uscan
  uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
  2⤵
  PID:1539
- /usr/bin/uscan
  uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
  2⤵
  PID:1539
- /sbin/uscan
  uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
  2⤵
  PID:1539
- /bin/uscan
  uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
  2⤵
  PID:1539
- /snap/bin/uscan
  uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
  2⤵
  PID:1539