2cbacce31c6bcdb3e7b757ec15b237d2a94cf0fa3df29ffd9181c24f5a49dbd3

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
13/11/2026, 19:25

Target
debian/orig-tar.sh
Size 400B
Sample261113-x5dyaaah29
SHA256 2cbacce31c6bcdb3e7b757ec15b237d2a94cf0fa3df29ffd9181c24f5a49dbd3
MD5 f9a537489e6e905b3f50d4bf26339500
SHA1 17f8d503ec5285b55adc52046a273fa2ff07abcb
SHA512 94f7f3c0c377a00d90d6b567102855c88d6c2dbe25eab70f355d7c47a9aad2f468f863a00e3fd5361bbb67605b57328f120968fd3c620ae797774973e3015b25
TLSH
T109E022D720EF08E4480571ADABA0FA7B760440D9EA66F9B9C2562790A098A96421C6D6
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/filesystems	sed

/tmp/debian/orig-tar.sh
/tmp/debian/orig-tar.sh
1⤵
PID:647
- /bin/sed
  sed "s/^.*+svn\$[0-9]\\+\$\$/\\1/"
  2⤵
  - Reads runtime system information
  PID:652