Analysis
-
max time kernel
4s -
platform
debian-9_armhf -
resource
debian9-armhf-20240418-en -
resource tags
arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
29-06-2024 14:33
Static task
static1
Behavioral task
behavioral1
Sample
run.js
Resource
android-x64-20240624-en
Behavioral task
behavioral2
Sample
run.js
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral3
Sample
run.js
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral4
Sample
run.js
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral5
Sample
run.js
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral6
Sample
run.js
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral7
Sample
run.js
Resource
ubuntu1804-amd64-20240508-en
General
-
Target
run.js
-
Size
59B
-
MD5
4775f27ad088bf259c1e8dfa934d9e31
-
SHA1
7a10d5d619e0ed2df7bf2efe1328ebb2014daa9c
-
SHA256
94f5a2fceeb85c248100f65f0700561ea4de7db848b2a302e65273c243b3fb14
-
SHA512
edfed992a8093c532a51c63da3e89cc73516f8baedb3f85d2d50bc26e18eebf8382fcf190396e869742d850cbd872260d155f60e6f7794b41864a2fbe207d912
Malware Config
Signatures
-
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
Processes:
nodedescription ioc process File opened for reading /proc/cpuinfo node -
Reads CPU attributes 1 TTPs 1 IoCs
Processes:
nodedescription ioc process File opened for reading /sys/devices/system/cpu/online node -
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
Processes:
nodedescription ioc process File opened for reading /sys/fs/cgroup/memory/memory.limit_in_bytes node -
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes:
nodedescription ioc process File opened for reading /proc/meminfo node