a1ce1dd3197b1292599010cf09eee2d15a367be7f642ef65c26f6e48eb00a242 | Triage

Analysis

max time kernel
6s
platform
debian-9_mipsel
resource
debian9-mipsel-20240226-en
resource tags

arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
25-04-2024 10:47

Sharing

Report Analysis Logs

General

Target

node_modules/.bin/crc32
Size

308B
MD5

a708a9c956d6684e5f0b34ab638d1f3f
SHA1

f6afc28e6be725a561743da9637d26495d7386b0
SHA256

0d56e35268bce01a4fe268df882e74187ada9034b7b18880637d6811ed3e5a29
SHA512

e717e3ad37ad04ad37302cbe68faf1883f10093929cb74ac878bb8e01bea2701d8208b7ad17587b2ec163d499d0a9cee1f377863d3165937350ebad439863b54

Score

3^/10

Malware Config

Signatures

Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

sed

description ioc process

File opened for reading /proc/filesystems sed

/tmp/node_modules/.bin/crc32
/tmp/node_modules/.bin/crc32
1⤵
PID:728

/bin/sed
sed -e "s,\\\\,/,g"
2⤵
- Reads runtime system information
PID:732

/usr/bin/dirname
dirname /tmp/node_modules/.bin/crc32
2⤵
PID:729

/bin/uname
uname
2⤵
PID:733

/usr/local/sbin/node
node /tmp/node_modules/.bin/../crc-32/bin/crc32.njs
1⤵
PID:728

/usr/local/bin/node
node /tmp/node_modules/.bin/../crc-32/bin/crc32.njs
1⤵
PID:728

/usr/sbin/node
node /tmp/node_modules/.bin/../crc-32/bin/crc32.njs
1⤵
PID:728

/usr/bin/node
node /tmp/node_modules/.bin/../crc-32/bin/crc32.njs
1⤵
PID:728

/sbin/node
node /tmp/node_modules/.bin/../crc-32/bin/crc32.njs
1⤵
PID:728

/bin/node
node /tmp/node_modules/.bin/../crc-32/bin/crc32.njs
1⤵
PID:728

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...