5dce6a534b71ba287273dfd74ba86686d020aac0daa21f40784172bde3a328b0

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
13/11/2026, 12:14

Target
debian/gen-appliance-depends.sh
Size 961B
Sample261113-pec93avt8j
SHA256 5dce6a534b71ba287273dfd74ba86686d020aac0daa21f40784172bde3a328b0
MD5 91babaaf78affeb1238511f22bbaee3c
SHA1 74f8da45aec199b6290a58ebe23acc50deed42c5
SHA512 dd538db58e1135c8e300575ea1294e421d19734d5fa5734fb96105ebd9ec8d97eb315cd9f53c8f3929552d7db92da2fa29d9eb297406d8e5e170b1a4353d9feb
TLSH
T17511D0BEA1730D70242E9E79455E410199FBE84F8273FCB47AEF21918F086E501A1CB9
MD5 SHA1 SHA512 TLSH

Score

3^/10

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/debian/debian/libguestfs-gfs2.substvars	gen-appliance-depends.sh

/tmp/debian/gen-appliance-depends.sh
/tmp/debian/gen-appliance-depends.sh
1⤵
- Writes file to tmp directory
PID:661
- /bin/cat
  cat "debian/libguestfs-gfs2/usr/lib/*-*/guestfs/supermin.d/packages-gfs2"
  2⤵
  PID:665