7a62f4ac7d5a04bd118813abe6d3c128fd968b656534914e369abba7225898dc

Analysis

max time kernel
5s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
13/11/2026, 12:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/rules
Size 900B
Sample261113-pb5vxaa13s
SHA256 7a62f4ac7d5a04bd118813abe6d3c128fd968b656534914e369abba7225898dc
MD5 6cef64049e81a55d7a0b685a574a5a2d
SHA1 9f08a7dad322b572a34ed34a3f3387454021549a
SHA512 837981c73b468e1d1459d46282cab5e28fe16204255b7a54e539a9f79fa3b554295e3b133ce2032ddc69d89922ca1b272ab22e13b75710ae48fa6dba8812f163
TLSH
T184112313C06852FFEB5CAFA1F286453727939CF0E27D7BB302D78953964A2600153451
MD5 SHA1 SHA512 TLSH

Score

2^/10

execution

Malware Config

Signatures

Software Deployment Tools 1 TTPs 4 IoCs

Use software deployment tools to execute code.

execution

Software Deployment Tools

T1072

pid	Process
646	dpkg-buildflags
667	dpkg-buildflags
670	dpkg-buildflags
693	dpkg-buildflags

/tmp/debian/rules
/tmp/debian/rules
1⤵
PID:640
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get CPPFLAGS
  2⤵
  PID:646
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get CPPFLAGS
  2⤵
  PID:646
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get CPPFLAGS
  2⤵
  PID:646
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get CPPFLAGS
  2⤵
  - Software Deployment Tools
  PID:646
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:665
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:666
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:666
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:666
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:666
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get CFLAGS
  2⤵
  PID:667
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get CFLAGS
  2⤵
  PID:667
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get CFLAGS
  2⤵
  PID:667
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get CFLAGS
  2⤵
  - Software Deployment Tools
  PID:667
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:668
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:669
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:669
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:669
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:669
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get CXXFLAGS
  2⤵
  PID:670
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get CXXFLAGS
  2⤵
  PID:670
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get CXXFLAGS
  2⤵
  PID:670
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get CXXFLAGS
  2⤵
  - Software Deployment Tools
  PID:670
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:689
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:691
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:691
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:691
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:691
- /usr/local/sbin/dpkg-buildflags
  dpkg-buildflags --get LDFLAGS
  2⤵
  PID:693
- /usr/local/bin/dpkg-buildflags
  dpkg-buildflags --get LDFLAGS
  2⤵
  PID:693
- /usr/sbin/dpkg-buildflags
  dpkg-buildflags --get LDFLAGS
  2⤵
  PID:693
- /usr/bin/dpkg-buildflags
  dpkg-buildflags --get LDFLAGS
  2⤵
  - Software Deployment Tools
  PID:693
- - /bin/pwd
    /bin/pwd
    3⤵
    PID:718
- - /usr/local/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:719
- - /usr/local/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:719
- - /usr/sbin/gcc
    gcc -dumpmachine
    3⤵
    PID:719
- - /usr/bin/gcc
    gcc -dumpmachine
    3⤵
    PID:719
- /usr/local/sbin/qt-qconf
  qt-qconf
  2⤵
  PID:720
- /usr/local/bin/qt-qconf
  qt-qconf
  2⤵
  PID:720
- /usr/sbin/qt-qconf
  qt-qconf
  2⤵
  PID:720
- /usr/bin/qt-qconf
  qt-qconf
  2⤵
  PID:720
- /sbin/qt-qconf
  qt-qconf
  2⤵
  PID:720
- /bin/qt-qconf
  qt-qconf
  2⤵
  PID:720

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Software Deployment Tools

T1072

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Software Deployment Tools

T1072

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads