Analysis

  • max time kernel
    1s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20260513-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    10/11/2026, 06:19

General

  • Target
    debian/rules
  • Size 163B
  • Sample261110-g3cdnsvs2j
  • SHA256 44884999e961082cb9092d6e83e37429bd3470bb9ba2b4e5557c28d4e2d85494
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/debian/rules
    /tmp/debian/rules
    1⤵
      PID:714
      • /usr/local/sbin/mkdir
        mkdir -p ../tarballs
        2⤵
          PID:719
        • /usr/local/bin/mkdir
          mkdir -p ../tarballs
          2⤵
            PID:719
          • /usr/sbin/mkdir
            mkdir -p ../tarballs
            2⤵
              PID:719
            • /usr/bin/mkdir
              mkdir -p ../tarballs
              2⤵
                PID:719
              • /sbin/mkdir
                mkdir -p ../tarballs
                2⤵
                  PID:719
                • /bin/mkdir
                  mkdir -p ../tarballs
                  2⤵
                  • Reads runtime system information
                  PID:719
                • /usr/local/sbin/uscan
                  uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
                  2⤵
                    PID:721
                  • /usr/local/bin/uscan
                    uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
                    2⤵
                      PID:721
                    • /usr/sbin/uscan
                      uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
                      2⤵
                        PID:721
                      • /usr/bin/uscan
                        uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
                        2⤵
                          PID:721
                        • /sbin/uscan
                          uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
                          2⤵
                            PID:721
                          • /bin/uscan
                            uscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"
                            2⤵
                              PID:721

                          Network

                                MITRE ATT&CK Matrix

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads