Overview
overview
4Static
static
1m=Da4hkd,E...cPd.js
windows7-x64
1m=Da4hkd,E...cPd.js
windows10-1703-x64
1m=Da4hkd,E...cPd.js
windows10-2004-x64
1m=Da4hkd,E...cPd.js
windows11-21h2-x64
1m=Da4hkd,E...cPd.js
android-10-x64
m=Da4hkd,E...cPd.js
android-11-x64
m=Da4hkd,E...cPd.js
android-13-x64
m=Da4hkd,E...cPd.js
android-9-x86
m=Da4hkd,E...cPd.js
macos-10.15-amd64
1m=Da4hkd,E...cPd.js
debian-12-armhf
1m=Da4hkd,E...cPd.js
debian-12-mipsel
4m=Da4hkd,E...cPd.js
debian-9-armhf
4m=Da4hkd,E...cPd.js
debian-9-mips
4m=Da4hkd,E...cPd.js
debian-9-mipsel
4m=Da4hkd,E...cPd.js
ubuntu-18.04-amd64
3m=Da4hkd,E...cPd.js
ubuntu-20.04-amd64
3Analysis
-
max time kernel
19s -
max time network
1678s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240226-en -
resource tags
arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
20-04-2024 14:21
Static task
static1
Behavioral task
behavioral1
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
win10v2004-20240412-en
Behavioral task
behavioral4
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
win11-20240412-en
Behavioral task
behavioral5
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
android-x64-20240221-en
Behavioral task
behavioral6
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
android-x64-arm64-20240221-en
Behavioral task
behavioral7
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
android-33-x64-arm64-20240229-en
Behavioral task
behavioral8
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral9
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
macos-20240410-en
Behavioral task
behavioral10
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
debian12-armhf-20240221-en
Behavioral task
behavioral11
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
debian12-mipsel-20240221-en
Behavioral task
behavioral12
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral13
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral14
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral15
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral16
Sample
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
Resource
ubuntu2004-amd64-20240221-en
General
-
Target
m=Da4hkd,Eox39d,Fy1Pv,GElbSc,HYSCof,UzbKLd,Wo3n8,aD8OEe,fcDBE,msmzHf,pHXghd,rTuANe,tIj4fb,xdV1C,xfmZMb,yfZcPd.js
-
Size
723KB
-
MD5
b6c7b221c1ebb0994c9b6d7ab018d657
-
SHA1
a007391dd35c77eb532de10eacb036728b33b6e1
-
SHA256
1a5b05acd3e262da53b10eb0113d910db06203e113dfa12315ee9aa4e590cc1a
-
SHA512
e4c2fd45c4d7e4b3d09a2c9b5ffc171533364ca02161f8ec02c213c52edcc5cd04449d1601463ad5c96654fef9821f44554c42ae82df72c6419e5799019a8c68
-
SSDEEP
12288:UdStkWGr4MGSyKfBHpHaC3aNuGzq+xCwQeYv4nxZ:UKkWWYSyKfBHpHaC3asGG+xC1eYv4nxZ
Malware Config
Signatures
-
Changes its process name 4 IoCs
Processes:
description ioc pid Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 717 Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 718 Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 719 Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 720 -
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
Processes:
nodejsdescription ioc process File opened for reading /proc/cpuinfo nodejs