Analysis

  • max time kernel
    18s
  • max time network
    1697s
  • platform
    debian-12_mipsel
  • resource
    debian12-mipsel-20240221-en
  • resource tags

    arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
  • submitted
    20-04-2024 14:21

General

  • Target

    m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js

  • Size

    723KB

  • MD5

    b6c7b221c1ebb0994c9b6d7ab018d657

  • SHA1

    a007391dd35c77eb532de10eacb036728b33b6e1

  • SHA256

    1a5b05acd3e262da53b10eb0113d910db06203e113dfa12315ee9aa4e590cc1a

  • SHA512

    e4c2fd45c4d7e4b3d09a2c9b5ffc171533364ca02161f8ec02c213c52edcc5cd04449d1601463ad5c96654fef9821f44554c42ae82df72c6419e5799019a8c68

  • SSDEEP

    12288:UdStkWGr4MGSyKfBHpHaC3aNuGzq+xCwQeYv4nxZ:UKkWWYSyKfBHpHaC3asGG+xC1eYv4nxZ

Score
4/10

Malware Config

Signatures

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /usr/bin/node
    node "/tmp/m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js"
    1⤵
    • Checks CPU configuration
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:726

Network

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Discovery

Virtualization/Sandbox Evasion

1
T1497

System Information Discovery

1
T1082

Replay Monitor

Loading Replay Monitor...

Downloads