4e709f833b425c04071a4079b1a45a873827649d238ddbb1f0325ea8585d00dd

Analysis

max time kernel
0s
max time network
128s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
09/06/2024, 08:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Login.js
Size 98KB
Sample240609-knbqdaha52
SHA256 4e709f833b425c04071a4079b1a45a873827649d238ddbb1f0325ea8585d00dd
MD5 0b7a06d9be3ad1bba18db0479c5ebf3a
SHA1 40f1a8fee7894b45e91f6815b2dfb791df21ebba
SHA512 588a08ff4ba2cc53944ee590956b2ade3e44c4c256492ca367eaa3864d7f1985dfbaed8485396700e207d07c9dbe39ca02fb6f64f628c7f91b2c602fb1565047
SSDEEP 3072:BFLGwiDI/q/6a3qrJaEGkejKjp+NpcsxS6ZJsnfJefrSoxbzbvqeu9vqSLt6Vpi/:BF2M
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/fs/cgroup/memory/memory.limit_in_bytes	node

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/meminfo	node

/usr/bin/node
node /tmp/Login.js
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1515

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads