dc96cf55bb9d716b84829075289082b98d7f8b0b43557cb5055b2a3eb6bb2502

Analysis

max time kernel
9s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
13/11/2026, 04:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/rules
Size 474B
Sample261113-ezz98af14k
SHA256 dc96cf55bb9d716b84829075289082b98d7f8b0b43557cb5055b2a3eb6bb2502
MD5 93b0c7964822d72bfdd62f0e61401091
SHA1 f15dd21c3fbddc8f7c052f1df45ed921ea18e54a
SHA512 12324faec5c3edd7799591ed2f684fa58ca5c55107bab14ef57b773d0e4cc7b987c9c76565eca551fc21267c01fe152278ead59aab589cca3aa2b3819d6d7467
TLSH
T12FF09EB980214CAD98C9896D774109959BD6E2A52BAFD290AAD454BD811F19110AFC21
MD5 SHA1 SHA512 TLSH

Score

2^/10

execution

Malware Config

Signatures

Software Deployment Tools 1 TTPs 9 IoCs

Use software deployment tools to execute code.

execution

Software Deployment Tools

T1072

pid	Process
741	dpkg-buildflags
772	dpkg-buildflags
676	dpkg-buildflags
733	dpkg-buildflags
766	dpkg-buildflags
653	dpkg-buildflags
679	dpkg-buildflags
704	dpkg-buildflags
730	dpkg-buildflags

/tmp/debian/rules
/tmp/debian/rules
1⤵
PID:647
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get OBJCXXFLAGS
  2⤵
  PID:653
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get OBJCXXFLAGS
  2⤵
  PID:653
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get OBJCXXFLAGS
  2⤵
  PID:653
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get OBJCXXFLAGS
  2⤵
  - Software Deployment Tools
  PID:653
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:674
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:675
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:675
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:675
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:675
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get CPPFLAGS
  2⤵
  PID:676
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get CPPFLAGS
  2⤵
  PID:676
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get CPPFLAGS
  2⤵
  PID:676
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get CPPFLAGS
  2⤵
  - Software Deployment Tools
  PID:676
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:677
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:678
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:678
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:678
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:678
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get GCJFLAGS
  2⤵
  PID:679
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get GCJFLAGS
  2⤵
  PID:679
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get GCJFLAGS
  2⤵
  PID:679
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get GCJFLAGS
  2⤵
  - Software Deployment Tools
  PID:679
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:700
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:701
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:701
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:701
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:701
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get CFLAGS
  2⤵
  PID:704
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get CFLAGS
  2⤵
  PID:704
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get CFLAGS
  2⤵
  PID:704
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get CFLAGS
  2⤵
  - Software Deployment Tools
  PID:704
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:728
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:729
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:729
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:729
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:729
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get CXXFLAGS
  2⤵
  PID:730
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get CXXFLAGS
  2⤵
  PID:730
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get CXXFLAGS
  2⤵
  PID:730
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get CXXFLAGS
  2⤵
  - Software Deployment Tools
  PID:730
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:731
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:732
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:732
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:732
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:732
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get FFLAGS
  2⤵
  PID:733
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get FFLAGS
  2⤵
  PID:733
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get FFLAGS
  2⤵
  PID:733
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get FFLAGS
  2⤵
  - Software Deployment Tools
  PID:733
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:736
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:738
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:738
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:738
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:738
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get LDFLAGS
  2⤵
  PID:741
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get LDFLAGS
  2⤵
  PID:741
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get LDFLAGS
  2⤵
  PID:741
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get LDFLAGS
  2⤵
  - Software Deployment Tools
  PID:741
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:761
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:763
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:763
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:763
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:763
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get FCFLAGS
  2⤵
  PID:766
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get FCFLAGS
  2⤵
  PID:766
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get FCFLAGS
  2⤵
  PID:766
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get FCFLAGS
  2⤵
  - Software Deployment Tools
  PID:766
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:770
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:771
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:771
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:771
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:771
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get OBJCFLAGS
  2⤵
  PID:772
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get OBJCFLAGS
  2⤵
  PID:772
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get OBJCFLAGS
  2⤵
  PID:772
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get OBJCFLAGS
  2⤵
  - Software Deployment Tools
  PID:772
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:773
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:774
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:774
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:774
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:774
- /usr/local/sbin/dh
  dh override_dh_auto_test "--buildsystem=rebar" --with rebar
  2⤵
  PID:775
- /usr/local/bin/dh
  dh override_dh_auto_test "--buildsystem=rebar" --with rebar
  2⤵
  PID:775
- /usr/sbin/dh
  dh override_dh_auto_test "--buildsystem=rebar" --with rebar
  2⤵
  PID:775
- /usr/bin/dh
  dh override_dh_auto_test "--buildsystem=rebar" --with rebar
  2⤵
  PID:775
- /sbin/dh
  dh override_dh_auto_test "--buildsystem=rebar" --with rebar
  2⤵
  PID:775
- /bin/dh
  dh override_dh_auto_test "--buildsystem=rebar" --with rebar
  2⤵
  PID:775

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Software Deployment Tools

T1072

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Software Deployment Tools

T1072

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads