Analysis
- max time kernel
1s - platform
debian-9_mipsel - resource
debian9-mipsel-20260513-en - resource tags
arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem - submitted
13/11/2026, 01:19
Static task
static1
Behavioral task
behavioral1
Sample
debian/rules
Resource
ubuntu1804-amd64-20261019-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
debian/rules
Resource
debian9-armhf-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
debian/rules
Resource
debian9-mipsbe-20260513-en
2 signatures
150 seconds
General
- Target debian/rules
- Size 486B
- Sample261113-bpyf4ayv8k
- SHA256 b28e22f3dc34aebcfcc1500aaa6d4e5431e39bb6b1183fd50eca127bfcbda13f
- MD5 e00191bf8d7628b8037a86129d80febf
- SHA1 62b83c3046650c71bb5aee9770f34a3081267b27
- SHA512 d6ad4c35dd2be31049770183f2271df70d948ffacdddece00474f59e10dfd893dff2a53d7cc4ca347a16e74f794733cd07d8944627f45321365434e1a0ed3619
- TLSH T1CEF05EC782764133AD0087B7FB0102B06CD5AF58A9BD20A12CD9AEB254AE60341E2776
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Command and Scripting Interpreter: Unix Shell 1 TTPs 1 IoCs
Execute scripts via Unix Shell.
pid Process 724 sh -
description ioc Process File opened for reading /proc/filesystems cp
Processes
-
/tmp/debian/rules/tmp/debian/rules1⤵PID:718
-
/bin/sh/bin/sh -c "[ ! -f /tmp/debian/debian/Config.pm.backup.tmp ] && cp /tmp/debian/lib/Template/Config.pm /tmp/debian/debian/Config.pm.backup.tmp"2⤵
- Command and Scripting Interpreter: Unix Shell
PID:724 -
/bin/cpcp /tmp/debian/lib/Template/Config.pm /tmp/debian/debian/Config.pm.backup.tmp3⤵
- Reads runtime system information
PID:729
-
-