Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
13/11/2026, 22:15
Static task
static1
Behavioral task
behavioral1
Sample
debian/rules
Resource
ubuntu1804-amd64-20261019-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
debian/rules
Resource
debian9-armhf-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
debian/rules
Resource
debian9-mipsbe-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
debian/rules
Resource
debian9-mipsel-20260513-en
1 signatures
150 seconds
General
- Target debian/rules
- Size 499B
- Sample261113-16fp2ssv7m
- SHA256 c55a62a9b8c0e5f40edf3f6be6203a202eb34e784619248f4d1e2eba17f31586
- MD5 cb6124dc29292c1f248b6350587fd07c
- SHA1 55885c70e40a82dafa7603ae69b36ed63ed14e87
- SHA512 80018a74ab89023b69cbd7c117eb51c6c4538f7af658b882d74f89dce0ef9d2cd06fd632b8e3743cc89ba11d10e72775263339cb203c41eac92dbe1dd95f3a45
- TLSH T118F09E52C1788DBE4D8CEB14E30648E149E591FCD9FE74C232FD056A818634632A6894
- MD5 SHA1 SHA512 TLSH
Score
3/10
Malware Config
Signatures
-
description ioc Process File opened for reading /proc/filesystems mkdir
Processes
-
/tmp/debian/rules/tmp/debian/rules1⤵PID:645
-
/usr/local/sbin/mkdirmkdir -p include2⤵PID:652
-
-
/usr/local/bin/mkdirmkdir -p include2⤵PID:652
-
-
/usr/sbin/mkdirmkdir -p include2⤵PID:652
-
-
/usr/bin/mkdirmkdir -p include2⤵PID:652
-
-
/sbin/mkdirmkdir -p include2⤵PID:652
-
-
/bin/mkdirmkdir -p include2⤵
- Reads runtime system information
PID:652
-
-
/usr/local/sbin/dh_autoreconfdh_autoreconf2⤵PID:656
-
-
/usr/local/bin/dh_autoreconfdh_autoreconf2⤵PID:656
-
-
/usr/sbin/dh_autoreconfdh_autoreconf2⤵PID:656
-
-
/usr/bin/dh_autoreconfdh_autoreconf2⤵PID:656
-
-
/sbin/dh_autoreconfdh_autoreconf2⤵PID:656
-
-
/bin/dh_autoreconfdh_autoreconf2⤵PID:656
-