3104af864f3b274f219352e359fbe0898f8f649bad09b07afc51c00d312511ce

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
13/11/2026, 18:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/rules
Size 298B
Sample261113-wsq7eaev7v
SHA256 3104af864f3b274f219352e359fbe0898f8f649bad09b07afc51c00d312511ce
MD5 41bd7337ddcbda1bc3ccddf909c12f8f
SHA1 f1a75d2cf1036a7d7be6f2885c20d1584f63f628
SHA512 2d043239c7b5238b15aa0eca13bf74a2e284e55f8f84af77a2d3e204c4035a55d40e71db549904497e146ea9908ac543980449627653378a926722dabd99e4e5
TLSH
T103E0C24AC37246F8496CE4361307E2E6EFE1E0AD7DF9F4C12AF14E14A44639174E26A4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

Command and Scripting Interpreter: Unix Shell 1 TTPs 1 IoCs

Execute scripts via Unix Shell.

execution

Unix Shell

T1059.004

pid	Process
1510	sh

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/filesystems	mkdir

/tmp/debian/rules
/tmp/debian/rules
1⤵
PID:1508
- /usr/local/sbin/mkdir
  mkdir .home
  2⤵
  PID:1509
- /usr/local/bin/mkdir
  mkdir .home
  2⤵
  PID:1509
- /usr/sbin/mkdir
  mkdir .home
  2⤵
  PID:1509
- /usr/bin/mkdir
  mkdir .home
  2⤵
  PID:1509
- /sbin/mkdir
  mkdir .home
  2⤵
  PID:1509
- /bin/mkdir
  mkdir .home
  2⤵
  - Reads runtime system information
  PID:1509
- /bin/sh
  /bin/sh -c "rc=0; HOME=/tmp/debian/.home dh_auto_test || rc=\$?; epmd -kill; exit \$rc"
  2⤵
  - Command and Scripting Interpreter: Unix Shell
  PID:1510

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Unix Shell

T1059.004

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads