Analysis
-
max time kernel
108s -
platform
debian-9_armhf -
resource
debian9-armhf-20240226-en -
resource tags
-
submitted
10/03/2024, 18:53
General
-
Target
SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/remoteEditStack.js
-
Size
2KB
-
MD5
cee1340ee8d22179f71d425ca228a33d
-
SHA1
7bb48817ab4dedfdbd9727c85a76383acb237253
-
SHA256
c6a9005ef221fe3ccb43c226bc0c7844b062800eef5ba5b53ee7636817650ed0
-
SHA512
d1b2b1cdf6f6b39df279f77ee453050edd1315d01fd16d9c88f759c0461c85aceac825b71f08b2545afd65e3f61cb728fc8e01f318747ce99e31a65b8516f564
Score
6/10
Malware Config
Signatures
-
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
-
Reads CPU attributes 1 TTPs 1 IoCs
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/usr/bin/nodenode /tmp/SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/remoteEditStack.js1⤵
- Checks CPU configuration
- Enumerates kernel/hardware configuration
- Reads runtime system information