Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
10/11/2026, 07:08
Static task
static1
Behavioral task
behavioral1
Sample
debian/rules
Resource
ubuntu1804-amd64-20261019-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
debian/rules
Resource
debian9-armhf-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
debian/rules
Resource
debian9-mipsbe-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
debian/rules
Resource
debian9-mipsel-20260513-en
1 signatures
150 seconds
General
- Target debian/rules
- Size 466B
- Sample261110-hypc4sdf74
- SHA256 dfd2701bdb3b7820dcc433d368b912c1841152e80358cb9ecbf2e8c174e03314
- MD5 3049ee2b6b05af25ea2518b2e157a03e
- SHA1 538ba95e678e2aa33924bfe02f462b72160ea55c
- SHA512 b2960e2fc3a646abb4285638c154ad7e7ccf14c22b93a3cf77b8253e0cdadaddf0809c3522b24b617d4ba6e70260459d4131bea16c970fafda561055d5b1b079
- TLSH T103F08C248E1E423B24D0BC20F877A0B2F7DB795037BE730AA8C206B9952CA94630A116
- MD5 SHA1 SHA512 TLSH
Score
3/10
Malware Config
Signatures
-
description ioc Process File opened for reading /proc/filesystems mkdir
Processes
-
/tmp/debian/rules/tmp/debian/rules1⤵PID:649
-
/usr/local/sbin/mkdirmkdir blib/lib/Mojolicious/public/mojo/jquery2⤵PID:656
-
-
/usr/local/bin/mkdirmkdir blib/lib/Mojolicious/public/mojo/jquery2⤵PID:656
-
-
/usr/sbin/mkdirmkdir blib/lib/Mojolicious/public/mojo/jquery2⤵PID:656
-
-
/usr/bin/mkdirmkdir blib/lib/Mojolicious/public/mojo/jquery2⤵PID:656
-
-
/sbin/mkdirmkdir blib/lib/Mojolicious/public/mojo/jquery2⤵PID:656
-
-
/bin/mkdirmkdir blib/lib/Mojolicious/public/mojo/jquery2⤵
- Reads runtime system information
PID:656
-