Analysis

  • max time kernel
    4s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240418-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    01-09-2024 02:44

General

  • Target

    simple-icons-simple-icons-3fb0e97/scripts/add-icon-data.js

  • Size

    5KB

  • MD5

    34b852d45ca0fc233955964a7d5d233f

  • SHA1

    8f635356026b1365dd3a14439997a38ff27130e4

  • SHA256

    62e214eb164d5e43e9a05d598dc64184631c6ef34ebae1446abad29fe77c55cf

  • SHA512

    0e3fc9c01f393b525416c3069ae1516de5f868934b25ce6a655a99940aef0cedd0696c8750354ee649b5fc19ed617474ae465010826b021c5b6707f2f43eedba

  • SSDEEP

    96:SyJ9bHdEAY29PiqDwN7QXzHETrR/ahT2ppdKGQi8avC:RJ59EaOlCzSR/ahT8pdLQDcC

Score
4/10

Malware Config

Signatures

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Reads CPU attributes 1 TTPs 1 IoCs
  • Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/simple-icons-simple-icons-3fb0e97/scripts/add-icon-data.js
    /tmp/simple-icons-simple-icons-3fb0e97/scripts/add-icon-data.js
    1⤵
      PID:675
    • /usr/local/sbin/node
      node /tmp/simple-icons-simple-icons-3fb0e97/scripts/add-icon-data.js
      1⤵
        PID:675
      • /usr/local/bin/node
        node /tmp/simple-icons-simple-icons-3fb0e97/scripts/add-icon-data.js
        1⤵
          PID:675
        • /usr/sbin/node
          node /tmp/simple-icons-simple-icons-3fb0e97/scripts/add-icon-data.js
          1⤵
            PID:675
          • /usr/bin/node
            node /tmp/simple-icons-simple-icons-3fb0e97/scripts/add-icon-data.js
            1⤵
            • Checks CPU configuration
            • Reads CPU attributes
            • Enumerates kernel/hardware configuration
            • Reads runtime system information
            PID:675

          Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads