4cc9166db14047dbf5f7328075b4037555c0f9f0b8e47e5bd40204f7f90710ea

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
13/11/2026, 01:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/orig-tar.sh
Size 398B
Sample261113-bpskvaes9v
SHA256 4cc9166db14047dbf5f7328075b4037555c0f9f0b8e47e5bd40204f7f90710ea
MD5 97c5dbb5b5a09774d110c528ca771726
SHA1 5a317f12ea1b56954682783c044c6b2e9503b206
SHA512 6afdf2ad1daa1d46af681aa36dcdb597609b9262e9cac197e14d2d968c3503bd746ca9323741e2444e3161a9ce2ce579d41595bfb0c4f83a1b5880692b6d38df
TLSH
T10AE02B1346DC30F2F40E60DFFBBCFB335690944A5B43D4A8C7926585A11621B596DA45
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	tar

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
645	tar

/tmp/debian/orig-tar.sh
/tmp/debian/orig-tar.sh
1⤵
PID:639
- /bin/mkdir
  mkdir -p jenkins-json-
  2⤵
  - Reads runtime system information
  PID:642
- /bin/tar
  tar -xzf ../jenkins-json_.orig.tar.gz -C jenkins-json- "--strip-components=1"
  2⤵
  - Reads runtime system information
  - System Network Configuration Discovery
  PID:645

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads