1624e398132a247c73177d7f2c30699b59c8c6b1c4db7cfc9db4be8b9ac82a22

Submit
Reports

Overview

overview

Static

static

StealthGuard.appx

windows7-x64

StealthGuard.appx

windows10-2004-x64

VFS/AppDat...DME.js

windows7-x64

VFS/AppDat...DME.js

windows10-2004-x64

VFS/AppDat...dex.js

windows7-x64

VFS/AppDat...dex.js

windows10-2004-x64

VFS/AppDat...DME.js

windows7-x64

VFS/AppDat...DME.js

windows10-2004-x64

VFS/AppDat...dex.js

windows7-x64

VFS/AppDat...dex.js

windows10-2004-x64

VFS/AppDat...dex.js

windows7-x64

VFS/AppDat...dex.js

windows10-2004-x64

VFS/AppDat...nts.js

windows7-x64

VFS/AppDat...nts.js

windows10-2004-x64

VFS/AppDat...dex.js

windows7-x64

VFS/AppDat...dex.js

windows10-2004-x64

VFS/AppDat...DME.js

windows7-x64

VFS/AppDat...DME.js

windows10-2004-x64

VFS/AppDat...dex.js

windows7-x64

VFS/AppDat...dex.js

windows10-2004-x64

VFS/AppDat...cmd.js

ubuntu-18.04-amd64

VFS/AppDat...cmd.js

debian-9-armhf

VFS/AppDat...cmd.js

debian-9-mips

VFS/AppDat...cmd.js

debian-9-mipsel

VFS/AppDat...dex.js

windows7-x64

VFS/AppDat...dex.js

windows10-2004-x64

VFS/AppDat...ade.js

windows7-x64

VFS/AppDat...ade.js

windows10-2004-x64

VFS/AppDat...ual.js

windows7-x64

VFS/AppDat...ual.js

windows10-2004-x64

VFS/AppDat...ive.js

windows7-x64

VFS/AppDat...ive.js

windows10-2004-x64

Analysis

max time kernel
5s
platform
debian-9_mipsel
resource
debian9-mipsel-20240418-en
resource tags

arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
18-09-2024 05:11

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

StealthGuard.appx

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

StealthGuard.appx

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

VFS/AppData/StealthGuard/node_modules/mime-types/README.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

VFS/AppData/StealthGuard/node_modules/mime-types/README.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

VFS/AppData/StealthGuard/node_modules/mime-types/index.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

VFS/AppData/StealthGuard/node_modules/mime-types/index.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

VFS/AppData/StealthGuard/node_modules/minipass/README.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

VFS/AppData/StealthGuard/node_modules/minipass/README.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

VFS/AppData/StealthGuard/node_modules/minipass/index.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

VFS/AppData/StealthGuard/node_modules/minipass/index.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral11

Sample

VFS/AppData/StealthGuard/node_modules/minipass/index.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

VFS/AppData/StealthGuard/node_modules/minipass/index.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

VFS/AppData/StealthGuard/node_modules/minizlib/constants.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

VFS/AppData/StealthGuard/node_modules/minizlib/constants.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

VFS/AppData/StealthGuard/node_modules/minizlib/index.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

VFS/AppData/StealthGuard/node_modules/minizlib/index.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

VFS/AppData/StealthGuard/node_modules/minizlib/node_modules/minipass/README.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

VFS/AppData/StealthGuard/node_modules/minizlib/node_modules/minipass/README.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

VFS/AppData/StealthGuard/node_modules/minizlib/node_modules/minipass/index.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

VFS/AppData/StealthGuard/node_modules/minizlib/node_modules/minipass/index.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

VFS/AppData/StealthGuard/node_modules/mkdirp/bin/cmd.js

Resource

ubuntu1804-amd64-20240729-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

VFS/AppData/StealthGuard/node_modules/mkdirp/bin/cmd.js

Resource

debian9-armhf-20240611-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

VFS/AppData/StealthGuard/node_modules/mkdirp/bin/cmd.js

Resource

debian9-mipsbe-20240611-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

VFS/AppData/StealthGuard/node_modules/mkdirp/bin/cmd.js

Resource

debian9-mipsel-20240418-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

VFS/AppData/StealthGuard/node_modules/mkdirp/index.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

VFS/AppData/StealthGuard/node_modules/mkdirp/index.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

VFS/AppData/StealthGuard/node_modules/mkdirp/lib/find-made.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

VFS/AppData/StealthGuard/node_modules/mkdirp/lib/find-made.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

VFS/AppData/StealthGuard/node_modules/mkdirp/lib/mkdirp-manual.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

VFS/AppData/StealthGuard/node_modules/mkdirp/lib/mkdirp-manual.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

VFS/AppData/StealthGuard/node_modules/mkdirp/lib/mkdirp-native.js

Resource

win7-20240708-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

VFS/AppData/StealthGuard/node_modules/mkdirp/lib/mkdirp-native.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

VFS/AppData/StealthGuard/node_modules/mkdirp/bin/cmd.js
Size

1KB
MD5

4cdb5f8434ce714b5c98684f5010a02b
SHA1

cc4ec8492cfa4a13de4f87746f23d2b5d44c1810
SHA256

e01e9253a9fcfa53498791c40b881a610e46c668db9eac34d6dc866ae3f61817
SHA512

b2c0b3af285218f83d1f2110bae8aec258dcd098da01a08edcba6ca760aaa8ce0b2779c434bd5ac34eb59e9ae186af48b94b03f060123380a5a4dd69c70c08a2

Score

1^/10

Malware Config

Signatures

Processes

/tmp/VFS/AppData/StealthGuard/node_modules/mkdirp/bin/cmd.js
/tmp/VFS/AppData/StealthGuard/node_modules/mkdirp/bin/cmd.js
1⤵
PID:825

/usr/local/sbin/node
"node " /tmp/VFS/AppData/StealthGuard/node_modules/mkdirp/bin/cmd.js
1⤵
PID:825

/usr/local/bin/node
"node " /tmp/VFS/AppData/StealthGuard/node_modules/mkdirp/bin/cmd.js
1⤵
PID:825

/usr/sbin/node
"node " /tmp/VFS/AppData/StealthGuard/node_modules/mkdirp/bin/cmd.js
1⤵
PID:825

/usr/bin/node
"node " /tmp/VFS/AppData/StealthGuard/node_modules/mkdirp/bin/cmd.js
1⤵
PID:825

/sbin/node
"node " /tmp/VFS/AppData/StealthGuard/node_modules/mkdirp/bin/cmd.js
1⤵
PID:825

/bin/node
"node " /tmp/VFS/AppData/StealthGuard/node_modules/mkdirp/bin/cmd.js
1⤵
PID:825

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads