Overview

overview

3

Static

static

1

debian/rules

ubuntu-18.04-amd64

3

debian/rules

debian-9-armhf

3

debian/rules

debian-9-mips

3

debian/rules

debian-9-mipsel

3

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    13/11/2026, 01:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    debian/rules
  • Size 486B
  • Sample261113-bpyf4ayv8k
  • SHA256 b28e22f3dc34aebcfcc1500aaa6d4e5431e39bb6b1183fd50eca127bfcbda13f
  • MD5 SHA1 SHA512 TLSH
Score
3/10
discoveryexecution

Malware Config

Signatures

  • Command and Scripting Interpreter: Unix Shell 1 TTPs 1 IoCs

    Execute scripts via Unix Shell.

    execution
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/debian/rules
    /tmp/debian/rules
    1⤵
      PID:652
      • /bin/sh
        /bin/sh -c "[ ! -f /tmp/debian/debian/Config.pm.backup.tmp ] && cp /tmp/debian/lib/Template/Config.pm /tmp/debian/debian/Config.pm.backup.tmp"
        2⤵
        • Command and Scripting Interpreter: Unix Shell
        PID:658
        • /bin/cp
          cp /tmp/debian/lib/Template/Config.pm /tmp/debian/debian/Config.pm.backup.tmp
          3⤵
          • Reads runtime system information
          PID:660

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads