Resubmissions

21-06-2024 12:37

240621-ptjematemr 3

21-06-2024 12:08

240621-paxg5sygkd 1

21-06-2024 12:05

240621-n9n5dasgpn 1

21-06-2024 12:05

240621-n9fs1ayfpc 1

21-06-2024 12:05

240621-n87v4asgmq 3

21-06-2024 06:25

240621-g6p4yatfjl 1

13-06-2024 04:58

240613-flzbfaydrn 10

Analysis

  • max time kernel
    0s
  • max time network
    3s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240508-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    21-06-2024 12:05

General

  • Target

    Tax Returns of R48_765.js

  • Size

    957KB

  • MD5

    0f597e6821a29bc87b36222f08eff311

  • SHA1

    e7f24cd04de9b92c013d71d3de526461cfb33c91

  • SHA256

    df018cc7e708b47edfe4f39769058ce0ba10a65fe653d3a32412dd504d3f2028

  • SHA512

    693ed1331f7f048789c11bc661949519149c43e3a76b3b600a1990f74763500a6b4a5efb532921bcdb58b27f3a136af9ba63e2e1dce4094fe078076d0073f1a7

  • SSDEEP

    6144:QQ5C90ha3hcY0c5OyZD5i8frkU+uKCbbBGZs3xh527wIy+6Y16vLKdYoiAL1Xl4R:TKF

Score
3/10

Malware Config

Signatures

  • Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /usr/bin/node
    node "/tmp/Tax Returns of R48_765.js"
    1⤵
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:1535

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads