Analysis
-
max time kernel
0s -
max time network
132s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240611-en -
resource tags
-
submitted
07/09/2024, 10:44
General
-
Target
jcubic-jquery.terminal-cebc63d/bin/convert.js
-
Size
3KB
-
MD5
107c8beb3b70a9053336ff0de568e998
-
SHA1
70193e6fc7d5b468704d81cdbb9c5fd0478ccaef
-
SHA256
5762c71b2e7527b3212612daeb915dfe3c90239ec0274715d894bb0f352d3c6d
-
SHA512
0fb94834b9571a228744347d5e9ff25cb3e3f9806ca307953734d186775b09829b185d59a37e156e34b1d33d41f403a95a833c4cca04ebd32b545ad2fc236d21
Score
3/10
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs 4 IoCs
Execution via JavaScript.
-
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/jcubic-jquery.terminal-cebc63d/bin/convert.js/tmp/jcubic-jquery.terminal-cebc63d/bin/convert.js1⤵
-
/usr/local/sbin/nodenode /tmp/jcubic-jquery.terminal-cebc63d/bin/convert.js1⤵
- Command and Scripting Interpreter: JavaScript
-
/usr/local/bin/nodenode /tmp/jcubic-jquery.terminal-cebc63d/bin/convert.js1⤵
- Command and Scripting Interpreter: JavaScript
-
/usr/sbin/nodenode /tmp/jcubic-jquery.terminal-cebc63d/bin/convert.js1⤵
- Command and Scripting Interpreter: JavaScript
-
/usr/bin/nodenode /tmp/jcubic-jquery.terminal-cebc63d/bin/convert.js1⤵
- Command and Scripting Interpreter: JavaScript
- Enumerates kernel/hardware configuration
- Reads runtime system information