bd9e67134324d8e32580589de0f20a18b29740d435da3614bbcb2804d1e60273

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
13/11/2026, 04:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/rules
Size 2KB
Sample261113-e1fbfazw9n
SHA256 bd9e67134324d8e32580589de0f20a18b29740d435da3614bbcb2804d1e60273
MD5 76d7009ccc6b08329f173f56efa9597d
SHA1 906f219db6d21aec2dc3a069a8ed5cf9f259df44
SHA512 dca868636e6df4bf329db318807728795dbe1247a3e2c8392dd645076567ebbfa7575e8cd53dabc5049f635ecce14ba42fbee35160ea635ef0bd0c59d0b2baf9
TLSH
T1624134F7708817BEEF836330A21763D89795D1F114D5F082E5C65B19114A15FE03BE2A
MD5 SHA1 SHA512 TLSH

Score

2^/10

execution

Malware Config

Signatures

Software Deployment Tools 1 TTPs 3 IoCs

Use software deployment tools to execute code.

execution

Software Deployment Tools

T1072

pid	Process
1546	dpkg-buildflags
1536	dpkg-buildflags
1543	dpkg-buildflags

/tmp/debian/rules
/tmp/debian/rules
1⤵
PID:1535
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get CFLAGS
  2⤵
  PID:1536
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get CFLAGS
  2⤵
  PID:1536
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get CFLAGS
  2⤵
  PID:1536
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get CFLAGS
  2⤵
  - Software Deployment Tools
  PID:1536
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:1540
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:1540
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:1540
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:1540
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:1542
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get CPPFLAGS
  2⤵
  PID:1543
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get CPPFLAGS
  2⤵
  PID:1543
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get CPPFLAGS
  2⤵
  PID:1543
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get CPPFLAGS
  2⤵
  - Software Deployment Tools
  PID:1543
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:1544
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:1544
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:1544
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:1544
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:1545
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get LDFLAGS
  2⤵
  PID:1546
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get LDFLAGS
  2⤵
  PID:1546
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get LDFLAGS
  2⤵
  PID:1546
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get LDFLAGS
  2⤵
  - Software Deployment Tools
  PID:1546
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:1547
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:1547
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:1547
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:1547
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:1549
- /usr/local/sbin/dh_testdir
  dh_testdir
  2⤵
  PID:1552
- /usr/local/bin/dh_testdir
  dh_testdir
  2⤵
  PID:1552
- /usr/sbin/dh_testdir
  dh_testdir
  2⤵
  PID:1552
- /usr/bin/dh_testdir
  dh_testdir
  2⤵
  PID:1552
- /sbin/dh_testdir
  dh_testdir
  2⤵
  PID:1552
- /bin/dh_testdir
  dh_testdir
  2⤵
  PID:1552
- /snap/bin/dh_testdir
  dh_testdir
  2⤵
  PID:1552

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Software Deployment Tools

T1072

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Software Deployment Tools

T1072

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads