5a9b6741bb818e8991570e5fe7d0b1a9f412dcb1796b9c05b44a20261539132c

Resubmissions

10-03-2024 18:59

240310-xm5naaae9v 7

10-03-2024 18:53

240310-xj4xksae21 7

Analysis

max time kernel
279s
platform
debian-9_mipsel
resource
debian9-mipsel-20240226-en
resource tags

arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
10-03-2024 18:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/controls/hubControls.js
Size

210KB
MD5

8f336cb6f04513ce6b965a002ef8ad51
SHA1

cf19a6010b6aad917086865efcabe37dfd30daf5
SHA256

298796c9bcc546850db135305d4e4c56e31e06575f21a910f0919c95fda01738
SHA512

1b766e36028b71153847befb1a71a5ab955a0f2d1e228aea8185884c54fa152685570bc9e45d1ed62a68af31ee480ea9d12aa194eb67dfa1b5f93af8febb712e
SSDEEP

3072:CPR5xxz+josnXuh5ru+nAkRCAsnJGJYxMt4rDqDQd6QBxcw7TfGZDj0HWM1fwSX2:0R3R+jTqeMYXG34ino/gciAzkaEcB/+X

Score

7^/10

antivm

Malware Config

Signatures

Changes its process name 4 IoCs

description	ioc	pid
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	817
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	816
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	818
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	815

Checks CPU configuration 1 TTPs 1 IoCs

Checks CPU information which indicate if the system is a virtual machine.

antivm

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
File opened for reading	/proc/cpuinfo	nodejs

/usr/bin/nodejs
nodejs /tmp/SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/perftools/controls/hubControls.js
1⤵
- Checks CPU configuration
PID:810

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads