a99350fce71b26c71a5eb64c7cbe4fbd172ca97be84a52d078d96ad05b9cbe9d

Analysis

max time kernel
0s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
10/11/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/rules
Size 599B
Sample261110-pee4naav4s
SHA256 a99350fce71b26c71a5eb64c7cbe4fbd172ca97be84a52d078d96ad05b9cbe9d
MD5 b4759fb69facc03ebe217cd57c5c960e
SHA1 03ff2195e5d1c1164ab6fb98e15475b0d879c0cd
SHA512 0113f30878b0215a1dc3facfcc517a86e2d79142cfa7f9ef83f1ecd790a7164cbedbfbcc7661084ebc55067c2bb74a61bd37f50ad911b3e5fe0aa17aa9fb49f1
TLSH
T1C3F00229CC55367928534B9132D2A7DE9555D1780B5B9002B6CD0A69D044FCD80370BA
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

Command and Scripting Interpreter: Unix Shell 1 TTPs 2 IoCs

Execute scripts via Unix Shell.

execution

Unix Shell

T1059.004

pid	Process
721	sh
726	sh

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/filesystems	sed

System Network Configuration Discovery 1 TTPs 2 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
726	sh
730	sed

/tmp/debian/rules
/tmp/debian/rules
1⤵
PID:717
- /bin/sh
  /bin/sh -c "rm -f obj-*/docs/old/html/.buildinfo"
  2⤵
  - Command and Scripting Interpreter: Unix Shell
  PID:721
- - /bin/rm
    rm -f "obj-*/docs/old/html/.buildinfo"
    3⤵
    PID:723
- /bin/sh
  /bin/sh -c "sed -i \" \\ s%http[s]*://cdn.mathjax.org/mathjax/latest/MathJax.js%file:///usr/share/javascript/mathjax/MathJax.js%; \\ s%https://cdnjs.cloudflare.com/ajax/libs/mathjax/[0-9].[0-9].[0-9]/MathJax.js%file:///usr/share/javascript/mathjax/MathJax.js%\" \\ obj-*/docs/old/html/*.html"
  2⤵
  - Command and Scripting Interpreter: Unix Shell
  - System Network Configuration Discovery
  PID:726
- - /bin/sed
    sed -i " s%http[s]*://cdn.mathjax.org/mathjax/latest/MathJax.js%file:///usr/share/javascript/mathjax/MathJax.js%; s%https://cdnjs.cloudflare.com/ajax/libs/mathjax/[0-9].[0-9].[0-9]/MathJax.js%file:///usr/share/javascript/mathjax/MathJax.js%" "obj-*/docs/old/html/*.html"
    3⤵
    - Reads runtime system information
    - System Network Configuration Discovery
    PID:730

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Unix Shell

T1059.004

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads