Analysis
-
max time kernel
5s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
-
submitted
02/08/2024, 15:00
General
-
Target
JJS-UI/resources/app.asar/node_modules/uuid/bin/uuid
-
Size
1KB
-
MD5
b7313e89e43dbf1a0dcb9e2ee5377a87
-
SHA1
c5b3ec4d8a8f620420aa52a8f3a7cfdff1197667
-
SHA256
53bddd1b8233d83e4456959f747d82678772afbf163a1e6e446d06d125e8e2cb
-
SHA512
f772f404355d3d384e96ddea819f8b7f7feaddc1665f464ac9778ade0b85953d38cbb7fc8abfb1c6aa06418162f7b4db227990e88c9719bc9ebecd868cf053c6
Score
4/10
Malware Config
Signatures
-
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
-
Reads CPU attributes 1 TTPs 1 IoCs
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/JJS-UI/resources/app.asar/node_modules/uuid/bin/uuid/tmp/JJS-UI/resources/app.asar/node_modules/uuid/bin/uuid1⤵
-
/usr/local/sbin/nodenode /tmp/JJS-UI/resources/app.asar/node_modules/uuid/bin/uuid1⤵
-
/usr/local/bin/nodenode /tmp/JJS-UI/resources/app.asar/node_modules/uuid/bin/uuid1⤵
-
/usr/sbin/nodenode /tmp/JJS-UI/resources/app.asar/node_modules/uuid/bin/uuid1⤵
-
/usr/bin/nodenode /tmp/JJS-UI/resources/app.asar/node_modules/uuid/bin/uuid1⤵
- Checks CPU configuration
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information