Analysis

  • max time kernel
    5s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20260513-en
  • resource tags

    arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    13/11/2026, 18:11

General

  • Target
    debian/tests/testsuite.xsession
  • Size 306B
  • Sample261113-ws1qvaev71
  • SHA256 ae9e08bc3373ea454cae80175167c8ed7fddcfea8d8ed9bb8d21cf2b23866aac
  • MD5 SHA1 SHA512 TLSH
Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/debian/tests/testsuite.xsession
    /tmp/debian/tests/testsuite.xsession
    1⤵
      PID:645
      • /bin/mkdir
        mkdir debian/tests.home
        2⤵
        • Reads runtime system information
        PID:651
      • /bin/sleep
        sleep 5
        2⤵
          PID:660
        • /bin/rm
          rm -rf debian/tests.home
          2⤵
            PID:751

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads