Analysis

  • max time kernel
    4s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240729-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    01-09-2024 02:44

General

  • Target

    simple-icons-simple-icons-3fb0e97/scripts/build/package.js

  • Size

    5KB

  • MD5

    7f81036ddc05b6dbb04bac9ea803ae39

  • SHA1

    667b68c69bcfe816840cc5c38e8d358f345d08d6

  • SHA256

    57357612fdf7ff22da6741fb9a4538cdce74125db625617664f68222beb74255

  • SHA512

    0338e0012d7fa4447e1a3f79a9e99e8c68a807543841885b90b1f76ec68353e4b73e57ed9cde47842999c40394c680869ee7768ac060e97b607bf92505e5a478

  • SSDEEP

    96:op5AfytEAizcr9VqGbkdSCRU1jrdFPEJiVKrY9dap520wW:UYGMczqGgwCRU1jrdNEYapQ0R

Score
4/10

Malware Config

Signatures

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Reads CPU attributes 1 TTPs 1 IoCs
  • Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/simple-icons-simple-icons-3fb0e97/scripts/build/package.js
    /tmp/simple-icons-simple-icons-3fb0e97/scripts/build/package.js
    1⤵
      PID:687
    • /usr/local/sbin/node
      node /tmp/simple-icons-simple-icons-3fb0e97/scripts/build/package.js
      1⤵
        PID:687
      • /usr/local/bin/node
        node /tmp/simple-icons-simple-icons-3fb0e97/scripts/build/package.js
        1⤵
          PID:687
        • /usr/sbin/node
          node /tmp/simple-icons-simple-icons-3fb0e97/scripts/build/package.js
          1⤵
            PID:687
          • /usr/bin/node
            node /tmp/simple-icons-simple-icons-3fb0e97/scripts/build/package.js
            1⤵
            • Checks CPU configuration
            • Reads CPU attributes
            • Enumerates kernel/hardware configuration
            • Reads runtime system information
            PID:687

          Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads