64606203b31fccfe6ebec0459018e209d17246054baaa6e01bd34c7f09185937

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
13/11/2026, 10:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/rules
Size 872B
Sample261113-l43dpsh18x
SHA256 64606203b31fccfe6ebec0459018e209d17246054baaa6e01bd34c7f09185937
MD5 448b6441f80bb4c3dc9b9f2c4d54097d
SHA1 bb431498c3462a687a8292fbdfc0fc7f626581ed
SHA512 9329ff1d1ce82d4794494ce9fdde09f13f1a4a17ef6faec84a5edd4a978ba3c146eab809ba933d89569d02053763a441ca002711c2f46defaf88fa085ba333ae
TLSH
T1A211E37BD0F650B032C00536BBE502216B9B95D6FEE5AC8312EF473582E3309862D9E4
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: Unix Shell 1 TTPs 1 IoCs

Execute scripts via Unix Shell.

execution

Unix Shell

T1059.004

pid	Process
650	sh

/tmp/debian/rules
/tmp/debian/rules
1⤵
PID:645
- /bin/sh
  /bin/sh -c "PYBUILD_SYSTEM=custom PYTHONPATH=. dh_auto_test"
  2⤵
  - Command and Scripting Interpreter: Unix Shell
  PID:650

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Unix Shell

T1059.004

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads