Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
13/11/2026, 10:05
Static task
static1
Behavioral task
behavioral1
Sample
debian/rules
Resource
ubuntu1804-amd64-20261019-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
debian/rules
Resource
debian9-armhf-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
debian/rules
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
debian/rules
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
General
- Target debian/rules
- Size 411B
- Sample261113-l4zyksh171
- SHA256 b82a930b3576afaeff6d811290a703fcbc8b0979ffaaaf6cde26825ef7da9fdf
- MD5 e902f412519082ebf57d26f72cb611f5
- SHA1 9d1fd6789e37ad93d169e72437ba39ccdd11fb80
- SHA512 6b1000e704b018409e8b40bae96c2cd46e32b241dc01ec3c5d33325e1475c2808f59f8e74c2ebbc730fe8e7e39c94bdaab14bea6fe0b5873bea658dc272cbbe9
- TLSH T131E0AB78E027E0A016191E18FA200060BF46E0BEB9A6A096E2CD6A31C1CD21724E0CA5
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
Processes
-
/tmp/debian/rules/tmp/debian/rules1⤵PID:643
-
/usr/local/sbin/phpabphpab --output lib/autoload.php --template debian/autoload.php.tpl lib2⤵PID:649
-
-
/usr/local/bin/phpabphpab --output lib/autoload.php --template debian/autoload.php.tpl lib2⤵PID:649
-
-
/usr/sbin/phpabphpab --output lib/autoload.php --template debian/autoload.php.tpl lib2⤵PID:649
-
-
/usr/bin/phpabphpab --output lib/autoload.php --template debian/autoload.php.tpl lib2⤵PID:649
-
-
/sbin/phpabphpab --output lib/autoload.php --template debian/autoload.php.tpl lib2⤵PID:649
-
-
/bin/phpabphpab --output lib/autoload.php --template debian/autoload.php.tpl lib2⤵PID:649
-