Overview
overview
4Static
static
1cdimascio-...ild.sh
ubuntu-18.04-amd64
4cdimascio-...ild.sh
debian-9-armhf
4cdimascio-...ild.sh
debian-9-mips
1cdimascio-...ild.sh
debian-9-mipsel
1cdimascio-...app.js
windows7-x64
3cdimascio-...app.js
windows10-2004-x64
3cdimascio-...dex.js
windows7-x64
3cdimascio-...dex.js
windows10-2004-x64
3cdimascio-...app.js
windows7-x64
3cdimascio-...app.js
windows10-2004-x64
3cdimascio-...app.js
windows7-x64
3cdimascio-...app.js
windows10-2004-x64
3cdimascio-...ets.js
windows7-x64
3cdimascio-...ets.js
windows10-2004-x64
3cdimascio-...ing.js
windows7-x64
3cdimascio-...ing.js
windows10-2004-x64
3cdimascio-...dex.js
windows7-x64
3cdimascio-...dex.js
windows10-2004-x64
3cdimascio-...est.js
windows7-x64
3cdimascio-...est.js
windows10-2004-x64
3cdimascio-...app.js
windows7-x64
3cdimascio-...app.js
windows10-2004-x64
3cdimascio-...ets.js
windows7-x64
3cdimascio-...ets.js
windows10-2004-x64
3cdimascio-...ing.js
windows7-x64
3cdimascio-...ing.js
windows10-2004-x64
3cdimascio-...dex.js
windows7-x64
3cdimascio-...dex.js
windows10-2004-x64
3cdimascio-...app.js
windows7-x64
3cdimascio-...app.js
windows10-2004-x64
3cdimascio-...ets.js
windows7-x64
3cdimascio-...ets.js
windows10-2004-x64
3Analysis
-
max time kernel
1s -
max time network
133s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
01-09-2024 00:55
Static task
static1
Behavioral task
behavioral1
Sample
cdimascio-express-openapi-validator-47a39b3/build.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
cdimascio-express-openapi-validator-47a39b3/build.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
cdimascio-express-openapi-validator-47a39b3/build.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral4
Sample
cdimascio-express-openapi-validator-47a39b3/build.sh
Resource
debian9-mipsel-20240729-en
Behavioral task
behavioral5
Sample
cdimascio-express-openapi-validator-47a39b3/examples/1-standard/app.js
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
cdimascio-express-openapi-validator-47a39b3/examples/1-standard/app.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
cdimascio-express-openapi-validator-47a39b3/examples/1-standard/services/index.js
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
cdimascio-express-openapi-validator-47a39b3/examples/1-standard/services/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
cdimascio-express-openapi-validator-47a39b3/examples/2-standard-multiple-api-specs/app.js
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
cdimascio-express-openapi-validator-47a39b3/examples/2-standard-multiple-api-specs/app.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
cdimascio-express-openapi-validator-47a39b3/examples/3-eov-operations/app.js
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
cdimascio-express-openapi-validator-47a39b3/examples/3-eov-operations/app.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
cdimascio-express-openapi-validator-47a39b3/examples/3-eov-operations/routes/pets.js
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
cdimascio-express-openapi-validator-47a39b3/examples/3-eov-operations/routes/pets.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
cdimascio-express-openapi-validator-47a39b3/examples/3-eov-operations/routes/ping.js
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
cdimascio-express-openapi-validator-47a39b3/examples/3-eov-operations/routes/ping.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
cdimascio-express-openapi-validator-47a39b3/examples/3-eov-operations/services/index.js
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
cdimascio-express-openapi-validator-47a39b3/examples/3-eov-operations/services/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
cdimascio-express-openapi-validator-47a39b3/examples/3-eov-operations/test.js
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
cdimascio-express-openapi-validator-47a39b3/examples/3-eov-operations/test.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
cdimascio-express-openapi-validator-47a39b3/examples/4-eov-operations-babel/src/app.js
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
cdimascio-express-openapi-validator-47a39b3/examples/4-eov-operations-babel/src/app.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
cdimascio-express-openapi-validator-47a39b3/examples/4-eov-operations-babel/src/routes/pets.js
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
cdimascio-express-openapi-validator-47a39b3/examples/4-eov-operations-babel/src/routes/pets.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
cdimascio-express-openapi-validator-47a39b3/examples/4-eov-operations-babel/src/routes/ping.js
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
cdimascio-express-openapi-validator-47a39b3/examples/4-eov-operations-babel/src/routes/ping.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
cdimascio-express-openapi-validator-47a39b3/examples/4-eov-operations-babel/src/services/index.js
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
cdimascio-express-openapi-validator-47a39b3/examples/4-eov-operations-babel/src/services/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
cdimascio-express-openapi-validator-47a39b3/examples/5-custom-operation-resolver/app.js
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
cdimascio-express-openapi-validator-47a39b3/examples/5-custom-operation-resolver/app.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
cdimascio-express-openapi-validator-47a39b3/examples/5-custom-operation-resolver/routes/pets.js
Resource
win7-20240729-en
Behavioral task
behavioral32
Sample
cdimascio-express-openapi-validator-47a39b3/examples/5-custom-operation-resolver/routes/pets.js
Resource
win10v2004-20240802-en
General
-
Target
cdimascio-express-openapi-validator-47a39b3/build.sh
-
Size
112B
-
MD5
22587c4e1adc1d9816d049c0772aaaa4
-
SHA1
b7c2ab92cfd9dee573243523c691071e36f36e56
-
SHA256
32331f6116a67c36e07096c68dac22c5fba678d34d8fe99ff54d0182220fab2d
-
SHA512
3e45c3f74eb38bc887d5815449a270c5163e0ef5d74319ec04d9715c0804966a019915f71c369c2b9b3b957b8c940475e3b454648534b7bbcde32df8f26338b4
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself npm 1495 node -
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/cgroup/memory/memory.limit_in_bytes node -
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/meminfo node
Processes
-
/tmp/cdimascio-express-openapi-validator-47a39b3/build.sh/tmp/cdimascio-express-openapi-validator-47a39b3/build.sh1⤵PID:1493
-
/bin/rmrm -rf node_modules2⤵PID:1494
-
-
/usr/bin/npmnpm ci2⤵PID:1495
-
-
/usr/local/sbin/nodenode /usr/bin/npm ci2⤵PID:1495
-
-
/usr/local/bin/nodenode /usr/bin/npm ci2⤵PID:1495
-
-
/usr/sbin/nodenode /usr/bin/npm ci2⤵PID:1495
-
-
/usr/bin/nodenode /usr/bin/npm ci2⤵
- Changes its process name
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1495
-