Analysis
-
max time kernel
263s -
platform
debian-9_armhf -
resource
debian9-armhf-20240226-en -
resource tags
-
submitted
10/03/2024, 18:53
General
-
Target
SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/uri.js
-
Size
14KB
-
MD5
f52cdf304a9049c8b9d3f90a0d8c43ff
-
SHA1
7f885a1a2c4131510e2fe30e01b74ee60f294948
-
SHA256
2f728abbb2a0f261056fc8e258ea1d0f7b70571f8944bdfe8a29e996bc39c34c
-
SHA512
a4fc5eb44cbf7353417f6713eaa5bf277d2f23fdc965c1fc8b6247625ef7cdc1f37c40446fc4ef084e3998389c51e20b6a73f22d38b3e380a39aa3f4b616f0ab
-
SSDEEP
192:pIL2KtTZ4YJNyp2uZEZefaqHskHk4JPFJPr3mb43/bFsHCsZTOB12PKAN4dLbuCv:pILsp28EgaqHskHk4Pxp6H/ZTnNyb9F1
Score
6/10
Malware Config
Signatures
-
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
-
Reads CPU attributes 1 TTPs 1 IoCs
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/usr/bin/nodenode /tmp/SystemApps/Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe/23/common/uri.js1⤵
- Checks CPU configuration
- Enumerates kernel/hardware configuration
- Reads runtime system information