Analysis

  • max time kernel
    4s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240729-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    01-09-2024 02:44

General

  • Target

    simple-icons-simple-icons-3fb0e97/scripts/release/reformat-markdown.js

  • Size

    1KB

  • MD5

    f07f174115d9b1b019d4a9539f1b4244

  • SHA1

    f39a100386b10e6de1883ab42affa8420c05180b

  • SHA256

    bf0401c7c25c253d9bc4a932c248f1f837bddc560915b43ee881367aeacaab42

  • SHA512

    fc7d3376d7e46bedbeedd6dd4adf309e676da8a177df831c8b429d92812bdebfd68a72c4b23fa4a509b8f59493d5233f4351f8d1df93d3823467b36a78a220ee

Score
4/10

Malware Config

Signatures

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Reads CPU attributes 1 TTPs 1 IoCs
  • Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

  • Writes file to tmp directory 2 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/simple-icons-simple-icons-3fb0e97/scripts/release/reformat-markdown.js
    /tmp/simple-icons-simple-icons-3fb0e97/scripts/release/reformat-markdown.js
    1⤵
      PID:685
    • /usr/local/sbin/node
      node /tmp/simple-icons-simple-icons-3fb0e97/scripts/release/reformat-markdown.js
      1⤵
        PID:685
      • /usr/local/bin/node
        node /tmp/simple-icons-simple-icons-3fb0e97/scripts/release/reformat-markdown.js
        1⤵
          PID:685
        • /usr/sbin/node
          node /tmp/simple-icons-simple-icons-3fb0e97/scripts/release/reformat-markdown.js
          1⤵
            PID:685
          • /usr/bin/node
            node /tmp/simple-icons-simple-icons-3fb0e97/scripts/release/reformat-markdown.js
            1⤵
            • Checks CPU configuration
            • Reads CPU attributes
            • Enumerates kernel/hardware configuration
            • Reads runtime system information
            • Writes file to tmp directory
            PID:685

          Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads