44884999e961082cb9092d6e83e37429bd3470bb9ba2b4e5557c28d4e2d85494

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
10/11/2026, 06:19

Target
debian/rules
Size 163B
Sample261110-g3cdnsvs2j
SHA256 44884999e961082cb9092d6e83e37429bd3470bb9ba2b4e5557c28d4e2d85494
MD5 52af57386983f7e4ad1a3d3c5bca3be3
SHA1 d3320890bf136094e8200d59c870bd5e4796234b
SHA512 397d7065721fd52e622abbf80bc4a04dd5a0d40a711ac06aa6a2f70ba16137e58ca8d209a1aecee18537532ded7c6adf4cd10b181cb55ab003cfb3480e4ec067
TLSH
T129C08C3BAD02F8B185842B1E726CD2607714F2A22336685CE829152272B8A053001DAF
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/filesystems	mkdir

/tmp/debian/rules
/tmp/debian/rules
1⤵
PID:661
- /usr/local/sbin/mkdir
  mkdir -p ../tarballs
  2⤵
  PID:667
- /usr/local/bin/mkdir
  mkdir -p ../tarballs
  2⤵
  PID:667
- /usr/sbin/mkdir
  mkdir -p ../tarballs
  2⤵
  PID:667
- /usr/bin/mkdir
  mkdir -p ../tarballs
  2⤵
  PID:667
- /sbin/mkdir
  mkdir -p ../tarballs
  2⤵
  PID:667
- /bin/mkdir
  mkdir -p ../tarballs
  2⤵
  - Reads runtime system information
  PID:667
- /usr/local/sbin/uscan
  uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
  2⤵
  PID:672
- /usr/local/bin/uscan
  uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
  2⤵
  PID:672
- /usr/sbin/uscan
  uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
  2⤵
  PID:672
- /usr/bin/uscan
  uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
  2⤵
  PID:672
- /sbin/uscan
  uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
  2⤵
  PID:672
- /bin/uscan
  uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
  2⤵
  PID:672