Analysis

  • max time kernel
    1s
  • max time network
    133s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    01-09-2024 00:55

General

  • Target

    cdimascio-express-openapi-validator-47a39b3/build.sh

  • Size

    112B

  • MD5

    22587c4e1adc1d9816d049c0772aaaa4

  • SHA1

    b7c2ab92cfd9dee573243523c691071e36f36e56

  • SHA256

    32331f6116a67c36e07096c68dac22c5fba678d34d8fe99ff54d0182220fab2d

  • SHA512

    3e45c3f74eb38bc887d5815449a270c5163e0ef5d74319ec04d9715c0804966a019915f71c369c2b9b3b957b8c940475e3b454648534b7bbcde32df8f26338b4

Score
4/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/cdimascio-express-openapi-validator-47a39b3/build.sh
    /tmp/cdimascio-express-openapi-validator-47a39b3/build.sh
    1⤵
      PID:1493
      • /bin/rm
        rm -rf node_modules
        2⤵
          PID:1494
        • /usr/bin/npm
          npm ci
          2⤵
            PID:1495
          • /usr/local/sbin/node
            node /usr/bin/npm ci
            2⤵
              PID:1495
            • /usr/local/bin/node
              node /usr/bin/npm ci
              2⤵
                PID:1495
              • /usr/sbin/node
                node /usr/bin/npm ci
                2⤵
                  PID:1495
                • /usr/bin/node
                  node /usr/bin/npm ci
                  2⤵
                  • Changes its process name
                  • Enumerates kernel/hardware configuration
                  • Reads runtime system information
                  PID:1495

              Network

              MITRE ATT&CK Enterprise v15

              Replay Monitor

              Loading Replay Monitor...

              Downloads