277f309ff0089444ad5aabc7905a8ae9c0385b50f932c938413dafb818051ab6

Analysis

max time kernel
5s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
13/11/2026, 02:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/rules
Size 1KB
Sample261113-cpp1dsfs7r
SHA256 277f309ff0089444ad5aabc7905a8ae9c0385b50f932c938413dafb818051ab6
MD5 5865d51e9e3818fede1603b5c704df7e
SHA1 ee59fa3f03019c8425c5e2f475d3f51b0aa45325
SHA512 a6ed095fba93d6fa9fc6c5f32ffcb055c52c0855481d3824c980d8a00c194bdca36a2522069e27961b27ae8dec1377cce79c42ca8f0b1082a086e09616eda164
TLSH
T15F41CF3AB2780BB97F286580E5D131027725F478A8B078C2F9CD949587876DCC2B77A2
MD5 SHA1 SHA512 TLSH

Score

2^/10

execution

Malware Config

Signatures

Software Deployment Tools 1 TTPs 1 IoCs

Use software deployment tools to execute code.

execution

Software Deployment Tools

T1072

pid	Process
708	dpkg-parsechangelog

/tmp/debian/rules
/tmp/debian/rules
1⤵
PID:704
- /usr/local/sbin/dpkg-parsechangelog
  dpkg-parsechangelog -STimestamp
  2⤵
  PID:708
- /usr/local/bin/dpkg-parsechangelog
  dpkg-parsechangelog -STimestamp
  2⤵
  PID:708
- /usr/sbin/dpkg-parsechangelog
  dpkg-parsechangelog -STimestamp
  2⤵
  PID:708
- /usr/bin/dpkg-parsechangelog
  dpkg-parsechangelog -STimestamp
  2⤵
  - Software Deployment Tools
  PID:708
- - /usr/local/sbin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:731
- - /usr/local/bin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:731
- - /usr/sbin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:731
- - /usr/bin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:731
- /usr/local/sbin/dh_auto_build
  dh_auto_build -- jar -x test -x check -x :spring-orm-hibernate4:compileJava -x :spring-orm-hibernate5:compileJava -x :spring-instrument-tomcat:compileJava -x :spring-webmvc-tiles2:compileJava -x :spring-websocket:compileJava
  2⤵
  PID:732
- /usr/local/bin/dh_auto_build
  dh_auto_build -- jar -x test -x check -x :spring-orm-hibernate4:compileJava -x :spring-orm-hibernate5:compileJava -x :spring-instrument-tomcat:compileJava -x :spring-webmvc-tiles2:compileJava -x :spring-websocket:compileJava
  2⤵
  PID:732
- /usr/sbin/dh_auto_build
  dh_auto_build -- jar -x test -x check -x :spring-orm-hibernate4:compileJava -x :spring-orm-hibernate5:compileJava -x :spring-instrument-tomcat:compileJava -x :spring-webmvc-tiles2:compileJava -x :spring-websocket:compileJava
  2⤵
  PID:732
- /usr/bin/dh_auto_build
  dh_auto_build -- jar -x test -x check -x :spring-orm-hibernate4:compileJava -x :spring-orm-hibernate5:compileJava -x :spring-instrument-tomcat:compileJava -x :spring-webmvc-tiles2:compileJava -x :spring-websocket:compileJava
  2⤵
  PID:732
- /sbin/dh_auto_build
  dh_auto_build -- jar -x test -x check -x :spring-orm-hibernate4:compileJava -x :spring-orm-hibernate5:compileJava -x :spring-instrument-tomcat:compileJava -x :spring-webmvc-tiles2:compileJava -x :spring-websocket:compileJava
  2⤵
  PID:732
- /bin/dh_auto_build
  dh_auto_build -- jar -x test -x check -x :spring-orm-hibernate4:compileJava -x :spring-orm-hibernate5:compileJava -x :spring-instrument-tomcat:compileJava -x :spring-webmvc-tiles2:compileJava -x :spring-websocket:compileJava
  2⤵
  PID:732

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Software Deployment Tools

T1072

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Software Deployment Tools

T1072

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads