Overview
overview
10Static
static
10Battly-Lau...ws.exe
windows7-x64
7Battly-Lau...ws.exe
windows10-2004-x64
10resources/...ute.js
windows7-x64
3resources/...ute.js
windows10-2004-x64
3resources/...dex.js
windows7-x64
3resources/...dex.js
windows10-2004-x64
3resources/...DME.js
windows7-x64
3resources/...DME.js
windows10-2004-x64
3resources/...dex.js
windows7-x64
3resources/...dex.js
windows10-2004-x64
3resources/...dex.js
windows7-x64
3resources/...dex.js
windows10-2004-x64
3resources/...ime.js
windows7-x64
3resources/...ime.js
windows10-2004-x64
3resources/...cli.js
ubuntu-18.04-amd64
4resources/...cli.js
debian-9-armhf
4resources/...cli.js
debian-9-mips
1resources/...cli.js
debian-9-mipsel
1resources/...dex.js
windows7-x64
3resources/...dex.js
windows10-2004-x64
3resources/...tch.js
windows7-x64
3resources/...tch.js
windows10-2004-x64
3resources/...ark.js
windows7-x64
3resources/...ark.js
windows10-2004-x64
3resources/...put.js
windows7-x64
3resources/...put.js
windows10-2004-x64
3resources/...col.js
windows7-x64
3resources/...col.js
windows10-2004-x64
3resources/...ten.js
windows7-x64
3resources/...ten.js
windows10-2004-x64
3resources/...ema.js
windows7-x64
3resources/...ema.js
windows10-2004-x64
3Analysis
-
max time kernel
0s -
max time network
132s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240508-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
01-08-2024 00:29
Behavioral task
behavioral1
Sample
Battly-Launcher-Windows.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Battly-Launcher-Windows.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral3
Sample
resources/app/node_modules/color-convert/route.js
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
resources/app/node_modules/color-convert/route.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral5
Sample
resources/app/node_modules/color-name/index.js
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
resources/app/node_modules/color-name/index.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral7
Sample
resources/app/node_modules/concat-map/README.js
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
resources/app/node_modules/concat-map/README.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral9
Sample
resources/app/node_modules/concat-map/index.js
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
resources/app/node_modules/concat-map/index.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral11
Sample
resources/app/node_modules/ejs-electron/index.js
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
resources/app/node_modules/ejs-electron/index.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral13
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/Mime.js
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/Mime.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral15
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/cli.js
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral16
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/cli.js
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral17
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/cli.js
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral18
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/cli.js
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral19
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/index.js
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/index.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral21
Sample
resources/app/node_modules/minimatch/minimatch.js
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
resources/app/node_modules/minimatch/minimatch.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral23
Sample
resources/app/node_modules/protocol/benchmark/benchmark.js
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
resources/app/node_modules/protocol/benchmark/benchmark.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral25
Sample
resources/app/node_modules/protocol/benchmark/input.js
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
resources/app/node_modules/protocol/benchmark/input.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral27
Sample
resources/app/node_modules/protocol/benchmark/protocol.js
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
resources/app/node_modules/protocol/benchmark/protocol.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral29
Sample
resources/app/node_modules/protocol/lib/flatten.js
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
resources/app/node_modules/protocol/lib/flatten.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral31
Sample
resources/app/node_modules/protocol/lib/flattenSchema.js
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
resources/app/node_modules/protocol/lib/flattenSchema.js
Resource
win10v2004-20240730-en
General
-
Target
resources/app/node_modules/ejs-electron/node_modules/mime/cli.js
-
Size
1KB
-
MD5
f13333cd6bfe3dcb5e949337a7186ad4
-
SHA1
b7f33b24da6e984dfb6c0c8c7dcf074c613673c2
-
SHA256
15da8d89bd7fc3a4025f79197a02a62284a95add244ec67bdd2b8dff918b5052
-
SHA512
96c5c21a657f284900cb966bccaac351fd540ec7197b64cf06018b45d57118b15a29040d78b874fa5622e66fb5b0f1a87bd6a16a50c930e910c6984bef7825c6
Malware Config
Signatures
-
Changes its process name 1 IoCs
Processes:
nodedescription ioc pid Process Changes the process name, possibly in an attempt to hide itself mime 1505 node -
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
Processes:
nodedescription ioc Process File opened for reading /sys/fs/cgroup/memory/memory.limit_in_bytes node -
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes:
nodedescription ioc Process File opened for reading /proc/meminfo node
Processes
-
/tmp/resources/app/node_modules/ejs-electron/node_modules/mime/cli.js/tmp/resources/app/node_modules/ejs-electron/node_modules/mime/cli.js1⤵PID:1505
-
/usr/local/sbin/nodenode /tmp/resources/app/node_modules/ejs-electron/node_modules/mime/cli.js1⤵PID:1505
-
/usr/local/bin/nodenode /tmp/resources/app/node_modules/ejs-electron/node_modules/mime/cli.js1⤵PID:1505
-
/usr/sbin/nodenode /tmp/resources/app/node_modules/ejs-electron/node_modules/mime/cli.js1⤵PID:1505
-
/usr/bin/nodenode /tmp/resources/app/node_modules/ejs-electron/node_modules/mime/cli.js1⤵
- Changes its process name
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1505