0f1153d341dcdf9e71035e80d7a6fe3c9d5b256e367e101561d121760ee6647c

Analysis

max time kernel
1s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
13/11/2026, 04:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/rules
Size 512B
Sample261113-e1kadsfw2w
SHA256 0f1153d341dcdf9e71035e80d7a6fe3c9d5b256e367e101561d121760ee6647c
MD5 e9869f79bd942bc2cf6a34e386c517ce
SHA1 89475b2048af2ed76a574d66a3aa8a827e857942
SHA512 0d336c8e6627a484472df241c83afaec3e4c06fb143affcff67206ffe301a2f23d7bc862838c0c3a8dd1345001b14a440c357591a6e1012356539bc26982e5aa
TLSH
T195F024A1A284E4F8AE66995079CA11152EEBD0FC9B2339C4A0CE1044A18E33AE20B625
MD5 SHA1 SHA512 TLSH

Score

2^/10

execution

Malware Config

Signatures

Software Deployment Tools 1 TTPs 1 IoCs

Use software deployment tools to execute code.

execution

Software Deployment Tools

T1072

pid	Process
657	dpkg-parsechangelog

/tmp/debian/rules
/tmp/debian/rules
1⤵
PID:650
- /usr/local/sbin/dpkg-parsechangelog
  dpkg-parsechangelog -STimestamp
  2⤵
  PID:657
- /usr/local/bin/dpkg-parsechangelog
  dpkg-parsechangelog -STimestamp
  2⤵
  PID:657
- /usr/sbin/dpkg-parsechangelog
  dpkg-parsechangelog -STimestamp
  2⤵
  PID:657
- /usr/bin/dpkg-parsechangelog
  dpkg-parsechangelog -STimestamp
  2⤵
  - Software Deployment Tools
  PID:657
- - /usr/local/sbin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:675
- - /usr/local/bin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:675
- - /usr/sbin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:675
- - /usr/bin/tail
    tail -n 40 debian/changelog
    3⤵
    PID:675
- /usr/local/sbin/dh_auto_install
  dh_auto_install
  2⤵
  PID:676
- /usr/local/bin/dh_auto_install
  dh_auto_install
  2⤵
  PID:676
- /usr/sbin/dh_auto_install
  dh_auto_install
  2⤵
  PID:676
- /usr/bin/dh_auto_install
  dh_auto_install
  2⤵
  PID:676
- /sbin/dh_auto_install
  dh_auto_install
  2⤵
  PID:676
- /bin/dh_auto_install
  dh_auto_install
  2⤵
  PID:676

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Software Deployment Tools

T1072

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Software Deployment Tools

T1072

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads