Analysis

  • max time kernel
    15s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    01-09-2024 02:44

General

  • Target

    simple-icons-simple-icons-3fb0e97/scripts/release/update-cdn-urls.js

  • Size

    1KB

  • MD5

    b01174e3fe52c269159708fbfc40d314

  • SHA1

    81dea0be01699ab0d852e2dcdfb8ac0339f5d0da

  • SHA256

    7c932879d4f3f2886cfc5fd5d4c110b69208cd326ecb9ff033314932317a6019

  • SHA512

    e0b9945822eb57ce8c50ba1b26c0c36a31367fad3944eed82183cfee6d0558ff8591a276b0099138408db042c50cdeedbecec65abf147adc68c67fa7bf243315

Score
4/10

Malware Config

Signatures

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Reads CPU attributes 1 TTPs 1 IoCs
  • Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/simple-icons-simple-icons-3fb0e97/scripts/release/update-cdn-urls.js
    /tmp/simple-icons-simple-icons-3fb0e97/scripts/release/update-cdn-urls.js
    1⤵
      PID:733
    • /usr/local/sbin/node
      node /tmp/simple-icons-simple-icons-3fb0e97/scripts/release/update-cdn-urls.js
      1⤵
        PID:733
      • /usr/local/bin/node
        node /tmp/simple-icons-simple-icons-3fb0e97/scripts/release/update-cdn-urls.js
        1⤵
          PID:733
        • /usr/sbin/node
          node /tmp/simple-icons-simple-icons-3fb0e97/scripts/release/update-cdn-urls.js
          1⤵
            PID:733
          • /usr/bin/node
            node /tmp/simple-icons-simple-icons-3fb0e97/scripts/release/update-cdn-urls.js
            1⤵
            • Checks CPU configuration
            • Reads CPU attributes
            • Enumerates kernel/hardware configuration
            • Reads runtime system information
            • Writes file to tmp directory
            PID:733

          Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads