Analysis
-
max time kernel
5s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
-
submitted
02-09-2024 03:15
General
-
Target
Setup/update/fonts/Sourse/cs/uuid/dist/bin/uuid
-
Size
44B
-
MD5
9ac6632cecfa735415456855b4bca18c
-
SHA1
62c3a7f3b1422c4e792a7bde14a92078623da468
-
SHA256
30b5422b6c95ccdc402effd7d3354ca6a6bce621cf21d0379749ddf1f96c1ad7
-
SHA512
56b3820114a9b6e5a0b954be0ef1e61240a6034e44d67a06b3ef9982b9083aea0888e0580d42ed734834c89138d32cf78f0cc1a2e27d0d04e58f54c2ec35d75d
Score
4/10
Malware Config
Signatures
-
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
-
Reads CPU attributes 1 TTPs 1 IoCs
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/Setup/update/fonts/Sourse/cs/uuid/dist/bin/uuid/tmp/Setup/update/fonts/Sourse/cs/uuid/dist/bin/uuid1⤵
-
/usr/local/sbin/nodenode /tmp/Setup/update/fonts/Sourse/cs/uuid/dist/bin/uuid1⤵
-
/usr/local/bin/nodenode /tmp/Setup/update/fonts/Sourse/cs/uuid/dist/bin/uuid1⤵
-
/usr/sbin/nodenode /tmp/Setup/update/fonts/Sourse/cs/uuid/dist/bin/uuid1⤵
-
/usr/bin/nodenode /tmp/Setup/update/fonts/Sourse/cs/uuid/dist/bin/uuid1⤵
- Checks CPU configuration
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information