Analysis
- max time kernel
1s - platform
debian-9_mipsel - resource
debian9-mipsel-20260513-en - resource tags
arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem - submitted
10/11/2026, 06:19
Static task
static1
Behavioral task
behavioral1
Sample
debian/rules
Resource
ubuntu1804-amd64-20261019-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
debian/rules
Resource
debian9-armhf-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
debian/rules
Resource
debian9-mipsbe-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
debian/rules
Resource
debian9-mipsel-20260513-en
1 signatures
150 seconds
General
- Target debian/rules
- Size 163B
- Sample261110-g3cdnsvs2j
- SHA256 44884999e961082cb9092d6e83e37429bd3470bb9ba2b4e5557c28d4e2d85494
- MD5 52af57386983f7e4ad1a3d3c5bca3be3
- SHA1 d3320890bf136094e8200d59c870bd5e4796234b
- SHA512 397d7065721fd52e622abbf80bc4a04dd5a0d40a711ac06aa6a2f70ba16137e58ca8d209a1aecee18537532ded7c6adf4cd10b181cb55ab003cfb3480e4ec067
- TLSH T129C08C3BAD02F8B185842B1E726CD2607714F2A22336685CE829152272B8A053001DAF
- MD5 SHA1 SHA512 TLSH
Score
3/10
Malware Config
Signatures
-
description ioc Process File opened for reading /proc/filesystems mkdir
Processes
-
/tmp/debian/rules/tmp/debian/rules1⤵PID:714
-
/usr/local/sbin/mkdirmkdir -p ../tarballs2⤵PID:719
-
-
/usr/local/bin/mkdirmkdir -p ../tarballs2⤵PID:719
-
-
/usr/sbin/mkdirmkdir -p ../tarballs2⤵PID:719
-
-
/usr/bin/mkdirmkdir -p ../tarballs2⤵PID:719
-
-
/sbin/mkdirmkdir -p ../tarballs2⤵PID:719
-
-
/bin/mkdirmkdir -p ../tarballs2⤵
- Reads runtime system information
PID:719
-
-
/usr/local/sbin/uscanuscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"2⤵PID:721
-
-
/usr/local/bin/uscanuscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"2⤵PID:721
-
-
/usr/sbin/uscanuscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"2⤵PID:721
-
-
/usr/bin/uscanuscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"2⤵PID:721
-
-
/sbin/uscanuscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"2⤵PID:721
-
-
/bin/uscanuscan --verbose --force-download --repack --compress xz "--destdir=../tarballs"2⤵PID:721
-