Overview

overview

10

Static

static

10

Install Termius.exe

windows10-2004-x64

5

$PLUGINSDI...er.dll

windows10-2004-x64

1

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

resources/...dex.js

windows10-2004-x64

1

resources/...try.js

windows10-2004-x64

1

resources/...ry.dll

windows10-2004-x64

3

resources/...dex.js

windows10-2004-x64

1

resources/...dex.js

windows10-2004-x64

1

resources/...win.js

windows10-2004-x64

1

resources/...dex.js

windows10-2004-x64

1

resources/...acy.js

windows10-2004-x64

1

resources/...ist.js

windows10-2004-x64

1

resources/...nux.js

windows10-2004-x64

1

resources/...ler.js

windows10-2004-x64

1

resources/...ead.js

windows10-2004-x64

1

resources/...ite.js

windows10-2004-x64

1

resources/...ser.js

windows10-2004-x64

1

resources/...n32.js

windows10-2004-x64

1

resources/...gs.dll

windows10-2004-x64

3

resources/...dex.js

windows10-2004-x64

1

resources/...ain.js

windows10-2004-x64

1

resources/...ng.dll

windows10-2004-x64

3

resources/...hrc.sh

windows10-2004-x64

3

resources/...hrc.sh

windows10-2004-x64

3

resources/elevate.exe

windows10-2004-x64

1

vk_swiftshader.dll

windows10-2004-x64

3

vulkan-1.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$R0/Uninst...us.exe

windows10-2004-x64

5

Resubmissions

28-03-2024 09:19

240328-laa3cshc5s 10

28-03-2024 09:13

240328-k6zvxseh67 10

Analysis

  • max time kernel
    58s
  • max time network
    64s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-03-2024 09:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    resources/app.asar.unpacked/node_modules/@termius/serialport-bindings/lib/linux.js

  • Size

    2KB

  • MD5

    c2ee0accbab5fd0c5faef21ba8df71c9

  • SHA1

    2a92a6d023f5b8bf0b78f0476cce146719604ab4

  • SHA256

    33141436365765d92db7e67261d83016fb5b491f90d73d13ca47e849f141f9b8

  • SHA512

    09821248e135d27f4c9c5b944d275f23f760ff169f2982f86962ee33b0651feec76aea696052861c52be3d0dcb2f78b80eced9c0b17bbc924d7b95f875d07737

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\node_modules\@termius\serialport-bindings\lib\linux.js
    1⤵
      PID:5076

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads