Analysis

  • max time kernel
    5s
  • max time network
    113s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20230831-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20230831-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    12-10-2023 01:22

General

  • Target

    discord-reg/bypass/browser/node_modules/.bin/node-gyp-build-optional

  • Size

    320B

  • MD5

    c13608407ba10ce1acffd1a92455ae71

  • SHA1

    1a9e2cc78d977b02068b7fc93dd95c183a13a5f6

  • SHA256

    7a2579617eebed9e4a7d860a2c0e149d0236117810d1c53a0a7041737bed5ec1

  • SHA512

    3ad46ce9cb92eb1eb5435c2fdc4ec3b1d199e1aa69a4bc2f8fbdace18322548f40433a044c9849dcd267bcadc98bbfc5c1f2b9553c11155376c2786691450343

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/discord-reg/bypass/browser/node_modules/.bin/node-gyp-build-optional
    /tmp/discord-reg/bypass/browser/node_modules/.bin/node-gyp-build-optional
    1⤵
      PID:588
      • /usr/bin/dirname
        dirname /tmp/discord-reg/bypass/browser/node_modules/.bin/node-gyp-build-optional
        2⤵
          PID:589
        • /bin/uname
          uname
          2⤵
            PID:593
        • /bin/sed
          sed -e "s,\\\\,/,g"
          1⤵
          • Reads runtime system information
          PID:592
        • /usr/local/sbin/node
          node /tmp/discord-reg/bypass/browser/node_modules/.bin/../node-gyp-build/optional.js
          1⤵
            PID:588
          • /usr/local/bin/node
            node /tmp/discord-reg/bypass/browser/node_modules/.bin/../node-gyp-build/optional.js
            1⤵
              PID:588
            • /usr/sbin/node
              node /tmp/discord-reg/bypass/browser/node_modules/.bin/../node-gyp-build/optional.js
              1⤵
                PID:588
              • /usr/bin/node
                node /tmp/discord-reg/bypass/browser/node_modules/.bin/../node-gyp-build/optional.js
                1⤵
                  PID:588
                • /sbin/node
                  node /tmp/discord-reg/bypass/browser/node_modules/.bin/../node-gyp-build/optional.js
                  1⤵
                    PID:588
                  • /bin/node
                    node /tmp/discord-reg/bypass/browser/node_modules/.bin/../node-gyp-build/optional.js
                    1⤵
                      PID:588

                    Network

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads