Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    13/11/2026, 22:15

General

  • Target
    debian/rules
  • Size 499B
  • Sample261113-16fp2ssv7m
  • SHA256 c55a62a9b8c0e5f40edf3f6be6203a202eb34e784619248f4d1e2eba17f31586
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/debian/rules
    /tmp/debian/rules
    1⤵
      PID:645
      • /usr/local/sbin/mkdir
        mkdir -p include
        2⤵
          PID:652
        • /usr/local/bin/mkdir
          mkdir -p include
          2⤵
            PID:652
          • /usr/sbin/mkdir
            mkdir -p include
            2⤵
              PID:652
            • /usr/bin/mkdir
              mkdir -p include
              2⤵
                PID:652
              • /sbin/mkdir
                mkdir -p include
                2⤵
                  PID:652
                • /bin/mkdir
                  mkdir -p include
                  2⤵
                  • Reads runtime system information
                  PID:652
                • /usr/local/sbin/dh_autoreconf
                  dh_autoreconf
                  2⤵
                    PID:656
                  • /usr/local/bin/dh_autoreconf
                    dh_autoreconf
                    2⤵
                      PID:656
                    • /usr/sbin/dh_autoreconf
                      dh_autoreconf
                      2⤵
                        PID:656
                      • /usr/bin/dh_autoreconf
                        dh_autoreconf
                        2⤵
                          PID:656
                        • /sbin/dh_autoreconf
                          dh_autoreconf
                          2⤵
                            PID:656
                          • /bin/dh_autoreconf
                            dh_autoreconf
                            2⤵
                              PID:656

                          Network

                                MITRE ATT&CK Matrix

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads