Overview

overview

3

Static

static

1

debian/rules

ubuntu-18.04-amd64

3

debian/rules

debian-9-armhf

3

debian/rules

debian-9-mips

3

debian/rules

debian-9-mipsel

3

debian/tes...-escpr

ubuntu-18.04-amd64

1

debian/tes...-escpr

debian-9-armhf

1

debian/tes...-escpr

debian-9-mips

1

debian/tes...-escpr

debian-9-mipsel

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    13/11/2026, 15:16

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    debian/rules
  • Size 1KB
  • Sample261113-snsynacz9v
  • SHA256 ea006b48561909631a27d5317a01fbd1d07a626063f033fa88cd260dabc310d5
  • MD5 SHA1 SHA512 TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/debian/rules
    /tmp/debian/rules
    1⤵
      PID:644
      • /usr/local/sbin/mkdir
        mkdir m4
        2⤵
          PID:650
        • /usr/local/bin/mkdir
          mkdir m4
          2⤵
            PID:650
          • /usr/sbin/mkdir
            mkdir m4
            2⤵
              PID:650
            • /usr/bin/mkdir
              mkdir m4
              2⤵
                PID:650
              • /sbin/mkdir
                mkdir m4
                2⤵
                  PID:650
                • /bin/mkdir
                  mkdir m4
                  2⤵
                  • Reads runtime system information
                  PID:650
                • /usr/local/sbin/dh_autoreconf
                  dh_autoreconf --as-needed
                  2⤵
                    PID:654
                  • /usr/local/bin/dh_autoreconf
                    dh_autoreconf --as-needed
                    2⤵
                      PID:654
                    • /usr/sbin/dh_autoreconf
                      dh_autoreconf --as-needed
                      2⤵
                        PID:654
                      • /usr/bin/dh_autoreconf
                        dh_autoreconf --as-needed
                        2⤵
                          PID:654
                        • /sbin/dh_autoreconf
                          dh_autoreconf --as-needed
                          2⤵
                            PID:654
                          • /bin/dh_autoreconf
                            dh_autoreconf --as-needed
                            2⤵
                              PID:654

                          Network

                                MITRE ATT&CK Matrix

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads