Analysis

  • max time kernel
    4s
  • max time network
    101s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20230831-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20230831-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    12-10-2023 01:22

General

  • Target

    discord-reg/bypass/browser/node_modules/.bin/node-gyp-build-test

  • Size

    324B

  • MD5

    f87430448b9c6fa9d758d12638d01488

  • SHA1

    2cd0d4c025a0caaf193b4a15eaf3f6ff0b4c2fa0

  • SHA256

    5afc301d22d0441c71ce3277c844fc066029e715698f09e769cff83b562695c9

  • SHA512

    1e402544e068dbd86c058a0a48decce1ec58bd5079be2469d918d8b9601444c158b8d7bb05b87126f7495713583b2944dd84bad24f21353c65f3f32c09075206

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/discord-reg/bypass/browser/node_modules/.bin/node-gyp-build-test
    /tmp/discord-reg/bypass/browser/node_modules/.bin/node-gyp-build-test
    1⤵
      PID:588
      • /usr/bin/dirname
        dirname /tmp/discord-reg/bypass/browser/node_modules/.bin/node-gyp-build-test
        2⤵
          PID:589
        • /bin/uname
          uname
          2⤵
            PID:593
        • /bin/sed
          sed -e "s,\\\\,/,g"
          1⤵
          • Reads runtime system information
          PID:592
        • /usr/local/sbin/node
          node /tmp/discord-reg/bypass/browser/node_modules/.bin/../node-gyp-build/build-test.js
          1⤵
            PID:588
          • /usr/local/bin/node
            node /tmp/discord-reg/bypass/browser/node_modules/.bin/../node-gyp-build/build-test.js
            1⤵
              PID:588
            • /usr/sbin/node
              node /tmp/discord-reg/bypass/browser/node_modules/.bin/../node-gyp-build/build-test.js
              1⤵
                PID:588
              • /usr/bin/node
                node /tmp/discord-reg/bypass/browser/node_modules/.bin/../node-gyp-build/build-test.js
                1⤵
                  PID:588
                • /sbin/node
                  node /tmp/discord-reg/bypass/browser/node_modules/.bin/../node-gyp-build/build-test.js
                  1⤵
                    PID:588
                  • /bin/node
                    node /tmp/discord-reg/bypass/browser/node_modules/.bin/../node-gyp-build/build-test.js
                    1⤵
                      PID:588

                    Network

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads