Overview
overview
3Static
static
1debian/autogen.sh
ubuntu-18.04-amd64
3debian/autogen.sh
debian-9-armhf
3debian/autogen.sh
debian-9-mips
3debian/autogen.sh
debian-9-mipsel
3debian/init.d
ubuntu-18.04-amd64
1debian/init.d
debian-9-armhf
1debian/init.d
debian-9-mips
1debian/init.d
debian-9-mipsel
1debian/postinst
ubuntu-18.04-amd64
1debian/postinst
debian-9-armhf
1debian/postinst
debian-9-mips
1debian/postinst
debian-9-mipsel
1debian/postrm
ubuntu-18.04-amd64
1debian/postrm
debian-9-armhf
1debian/postrm
debian-9-mips
1debian/postrm
debian-9-mipsel
1debian/preinst
ubuntu-18.04-amd64
1debian/preinst
debian-9-armhf
1debian/preinst
debian-9-mips
1debian/preinst
debian-9-mipsel
1debian/rules
ubuntu-18.04-amd64
3debian/rules
debian-9-armhf
3debian/rules
debian-9-mips
3debian/rules
debian-9-mipsel
3Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
13/11/2026, 10:08
Static task
static1
Behavioral task
behavioral1
Sample
debian/autogen.sh
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral2
Sample
debian/autogen.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
debian/autogen.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
debian/autogen.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral5
Sample
debian/init.d
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral6
Sample
debian/init.d
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral7
Sample
debian/init.d
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral8
Sample
debian/init.d
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral9
Sample
debian/postinst
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral10
Sample
debian/postinst
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral11
Sample
debian/postinst
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral12
Sample
debian/postinst
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral13
Sample
debian/postrm
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral14
Sample
debian/postrm
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral15
Sample
debian/postrm
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral16
Sample
debian/postrm
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral17
Sample
debian/preinst
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral18
Sample
debian/preinst
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral19
Sample
debian/preinst
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral20
Sample
debian/preinst
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral21
Sample
debian/rules
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral22
Sample
debian/rules
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral23
Sample
debian/rules
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral24
Sample
debian/rules
Resource
debian9-mipsel-20260513-en
General
- Target debian/autogen.sh
- Size 819B
- Sample261113-l595yaav7n
- SHA256 6142e3418266bc457faff597779b2f3a869eedeaf144a1e70e72c0b32fbed4a9
- MD5 36b1d1614621c23471dc307beaf625f2
- SHA1 b1483d8d96b09edcb392d37eedc82e276ca38ff0
- SHA512 3401016aca5ffb05208866d200bc592ee6637012539b619fb8b35498d0fe08fd23672f61b45da021b2138b1d3519f9a4e1ced35606daf56f57252f0c6b68ae5a
- TLSH T14701F173144CA9B74D00CC7BA34B7B616F877AEE4A07700084EF53A8F18E4A6E037229
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
-
description ioc Process File opened for reading /proc/filesystems cp File opened for reading /proc/self/fd xargs File opened for reading /proc/filesystems find File opened for reading /proc/self/fd xargs File opened for reading /proc/filesystems find
Processes
-
/tmp/debian/autogen.sh/tmp/debian/autogen.sh1⤵PID:654
-
/usr/bin/xargsxargs -0 rm -rf ";"2⤵
- Reads runtime system information
PID:658 -
/usr/local/sbin/rmrm -rf ";"3⤵PID:663
-
-
/usr/local/bin/rmrm -rf ";"3⤵PID:663
-
-
/usr/sbin/rmrm -rf ";"3⤵PID:663
-
-
/usr/bin/rmrm -rf ";"3⤵PID:663
-
-
/sbin/rmrm -rf ";"3⤵PID:663
-
-
/bin/rmrm -rf ";"3⤵PID:663
-
-
-
/usr/bin/findfind -type d -name autom4te.cache -print02⤵
- Reads runtime system information
PID:657
-
-
/usr/bin/xargsxargs -0 rm -f2⤵
- Reads runtime system information
PID:668 -
/usr/local/sbin/rmrm -f3⤵PID:672
-
-
/usr/local/bin/rmrm -f3⤵PID:672
-
-
/usr/sbin/rmrm -f3⤵PID:672
-
-
/usr/bin/rmrm -f3⤵PID:672
-
-
/sbin/rmrm -f3⤵PID:672
-
-
/bin/rmrm -f3⤵PID:672
-
-
-
/usr/bin/findfind -type f "(" -name missing -o -name install-sh -o -name mkinstalldirs -o -name depcomp -o -name ltmain.sh -o -name configure -o -name config.sub -o -name config.guess ")" -print02⤵
- Reads runtime system information
PID:667
-
-
/bin/cpcp -f /usr/share/automake/install-sh .2⤵
- Reads runtime system information
PID:674
-