Analysis

  • max time kernel
    25s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20260513-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    13/11/2026, 12:10

General

  • Target
    debian/rules
  • Size 900B
  • Sample261113-pb5vxaa13s
  • SHA256 7a62f4ac7d5a04bd118813abe6d3c128fd968b656534914e369abba7225898dc
  • MD5 SHA1 SHA512 TLSH
Score
2/10

Malware Config

Signatures

  • Software Deployment Tools 1 TTPs 4 IoCs

    Use software deployment tools to execute code.

Processes

  • /tmp/debian/rules
    /tmp/debian/rules
    1⤵
      PID:717
      • /usr/local/sbin/dpkg-buildflags
        dpkg-buildflags --get CPPFLAGS
        2⤵
          PID:719
        • /usr/local/bin/dpkg-buildflags
          dpkg-buildflags --get CPPFLAGS
          2⤵
            PID:719
          • /usr/sbin/dpkg-buildflags
            dpkg-buildflags --get CPPFLAGS
            2⤵
              PID:719
            • /usr/bin/dpkg-buildflags
              dpkg-buildflags --get CPPFLAGS
              2⤵
              • Software Deployment Tools
              PID:719
              • /bin/pwd
                /bin/pwd
                3⤵
                  PID:741
                • /usr/local/sbin/gcc
                  gcc -dumpmachine
                  3⤵
                    PID:742
                  • /usr/local/bin/gcc
                    gcc -dumpmachine
                    3⤵
                      PID:742
                    • /usr/sbin/gcc
                      gcc -dumpmachine
                      3⤵
                        PID:742
                      • /usr/bin/gcc
                        gcc -dumpmachine
                        3⤵
                          PID:742
                      • /usr/local/sbin/dpkg-buildflags
                        dpkg-buildflags --get CFLAGS
                        2⤵
                          PID:743
                        • /usr/local/bin/dpkg-buildflags
                          dpkg-buildflags --get CFLAGS
                          2⤵
                            PID:743
                          • /usr/sbin/dpkg-buildflags
                            dpkg-buildflags --get CFLAGS
                            2⤵
                              PID:743
                            • /usr/bin/dpkg-buildflags
                              dpkg-buildflags --get CFLAGS
                              2⤵
                              • Software Deployment Tools
                              PID:743
                              • /bin/pwd
                                /bin/pwd
                                3⤵
                                  PID:756
                                • /usr/local/sbin/gcc
                                  gcc -dumpmachine
                                  3⤵
                                    PID:757
                                  • /usr/local/bin/gcc
                                    gcc -dumpmachine
                                    3⤵
                                      PID:757
                                    • /usr/sbin/gcc
                                      gcc -dumpmachine
                                      3⤵
                                        PID:757
                                      • /usr/bin/gcc
                                        gcc -dumpmachine
                                        3⤵
                                          PID:757
                                      • /usr/local/sbin/dpkg-buildflags
                                        dpkg-buildflags --get CXXFLAGS
                                        2⤵
                                          PID:760
                                        • /usr/local/bin/dpkg-buildflags
                                          dpkg-buildflags --get CXXFLAGS
                                          2⤵
                                            PID:760
                                          • /usr/sbin/dpkg-buildflags
                                            dpkg-buildflags --get CXXFLAGS
                                            2⤵
                                              PID:760
                                            • /usr/bin/dpkg-buildflags
                                              dpkg-buildflags --get CXXFLAGS
                                              2⤵
                                              • Software Deployment Tools
                                              PID:760
                                              • /bin/pwd
                                                /bin/pwd
                                                3⤵
                                                  PID:779
                                                • /usr/local/sbin/gcc
                                                  gcc -dumpmachine
                                                  3⤵
                                                    PID:780
                                                  • /usr/local/bin/gcc
                                                    gcc -dumpmachine
                                                    3⤵
                                                      PID:780
                                                    • /usr/sbin/gcc
                                                      gcc -dumpmachine
                                                      3⤵
                                                        PID:780
                                                      • /usr/bin/gcc
                                                        gcc -dumpmachine
                                                        3⤵
                                                          PID:780
                                                      • /usr/local/sbin/dpkg-buildflags
                                                        dpkg-buildflags --get LDFLAGS
                                                        2⤵
                                                          PID:782
                                                        • /usr/local/bin/dpkg-buildflags
                                                          dpkg-buildflags --get LDFLAGS
                                                          2⤵
                                                            PID:782
                                                          • /usr/sbin/dpkg-buildflags
                                                            dpkg-buildflags --get LDFLAGS
                                                            2⤵
                                                              PID:782
                                                            • /usr/bin/dpkg-buildflags
                                                              dpkg-buildflags --get LDFLAGS
                                                              2⤵
                                                              • Software Deployment Tools
                                                              PID:782
                                                              • /bin/pwd
                                                                /bin/pwd
                                                                3⤵
                                                                  PID:795
                                                                • /usr/local/sbin/gcc
                                                                  gcc -dumpmachine
                                                                  3⤵
                                                                    PID:796
                                                                  • /usr/local/bin/gcc
                                                                    gcc -dumpmachine
                                                                    3⤵
                                                                      PID:796
                                                                    • /usr/sbin/gcc
                                                                      gcc -dumpmachine
                                                                      3⤵
                                                                        PID:796
                                                                      • /usr/bin/gcc
                                                                        gcc -dumpmachine
                                                                        3⤵
                                                                          PID:796
                                                                      • /usr/local/sbin/qt-qconf
                                                                        qt-qconf
                                                                        2⤵
                                                                          PID:797
                                                                        • /usr/local/bin/qt-qconf
                                                                          qt-qconf
                                                                          2⤵
                                                                            PID:797
                                                                          • /usr/sbin/qt-qconf
                                                                            qt-qconf
                                                                            2⤵
                                                                              PID:797
                                                                            • /usr/bin/qt-qconf
                                                                              qt-qconf
                                                                              2⤵
                                                                                PID:797
                                                                              • /sbin/qt-qconf
                                                                                qt-qconf
                                                                                2⤵
                                                                                  PID:797
                                                                                • /bin/qt-qconf
                                                                                  qt-qconf
                                                                                  2⤵
                                                                                    PID:797

                                                                                Network

                                                                                      MITRE ATT&CK Enterprise v16

                                                                                      Replay Monitor

                                                                                      Loading Replay Monitor...

                                                                                      Downloads