Analysis

  • max time kernel
    22s
  • max time network
    1683s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240226-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    29-03-2024 12:49

General

  • Target

    target.js

  • Size

    38B

  • MD5

    3ec23e30140917bf3a86a072d5084556

  • SHA1

    4aa33668f7eb5a19a7baeccf55aa615a3c9f8545

  • SHA256

    094354a414ab030f01022fcb8d3592f56085334a8932985e61216bd7a6c13cd6

  • SHA512

    60dd04357633ef64e29f2b1d152c9b993b098333bd2168816907f9b9f26d44852024f858beda2870635bee90ca18d125e3b65c4094155df919b1b00448e0b491

Score
7/10

Malware Config

Signatures

  • Changes its process name 4 IoCs
  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

Processes

  • /usr/bin/nodejs
    nodejs /tmp/target.js
    1⤵
    • Checks CPU configuration
    PID:697

Network

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Discovery

Virtualization/Sandbox Evasion

1
T1497

Replay Monitor

Loading Replay Monitor...

Downloads