95ef9c9934d1d5a239cf9d594ffb9179b431f8f349bc12beb3e8d091de015574

Analysis

max time kernel
1s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
13/11/2026, 23:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/init
Size 1KB
Sample261113-24va4agy4m
SHA256 95ef9c9934d1d5a239cf9d594ffb9179b431f8f349bc12beb3e8d091de015574
MD5 fbb02f43af5880f746b681a2973eecd6
SHA1 8251eaf408f0ee922e8d6949e374c98f78a47512
SHA512 6eda8dcf7f295785be3d71dcd8578db2fbc6d536e7618ef83cf6eeb7d434a82a06ba8a3a8b05f62c8fd2c1295faa0d4ef28a8886bc26de718fbec6deac06d9d7
TLSH
T100412101B94DEC282BD64F1F960B8E41AB8A404F12BDC629719C5FE13FAA387E5F7154
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/fs/kdbus/0-system/bus	systemctl

Reads runtime system information 4 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/1/environ	systemctl
File opened for reading	/proc/cmdline	systemctl
File opened for reading	/proc/filesystems	systemctl
File opened for reading	/proc/self/stat	systemctl

/tmp/debian/init
/tmp/debian/init
1⤵
PID:720
- /bin/run-parts
  run-parts --lsbsysinit --list /lib/lsb/init-functions.d
  2⤵
  PID:723
- /bin/systemctl
  systemctl -p LoadState --value show init.service
  2⤵
  - Enumerates kernel/hardware configuration
  - Reads runtime system information
  PID:725
- /usr/bin/basename
  basename /tmp/debian/init
  2⤵
  PID:733

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads