Overview

overview

7

Static

static

1

target.js

android-9-x86

target.js

debian-9-armhf

6

target.js

debian-9-mips

7

target.js

ubuntu-18.04-amd64

3

Analysis

  • max time kernel
    3s
  • max time network
    1684s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240226-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    29-03-2024 12:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    target.js

  • Size

    38B

  • MD5

    3ec23e30140917bf3a86a072d5084556

  • SHA1

    4aa33668f7eb5a19a7baeccf55aa615a3c9f8545

  • SHA256

    094354a414ab030f01022fcb8d3592f56085334a8932985e61216bd7a6c13cd6

  • SHA512

    60dd04357633ef64e29f2b1d152c9b993b098333bd2168816907f9b9f26d44852024f858beda2870635bee90ca18d125e3b65c4094155df919b1b00448e0b491

Score
6/10
antivm

Malware Config

Signatures

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

    antivm
  • Reads CPU attributes 1 TTPs 1 IoCs
  • Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /usr/bin/node
    node /tmp/target.js
    1⤵
    • Checks CPU configuration
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:668

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Credential Access

Discovery

Virtualization/Sandbox Evasion

1
T1497

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads