Analysis

  • max time kernel
    7s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    22/10/2024, 00:20

General

  • Target
    resources/app/node_modules/ejs/bin/cli.js
  • Size 4KB
  • Sample241022-amx7waxepl
  • SHA256 565df8144924d86535189192b207178eea934962d4c3b29498a4e8fe7f49e8ac
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Command and Scripting Interpreter: JavaScript 1 TTPs 6 IoCs

    Execution via JavaScript.

Processes

  • /tmp/resources/app/node_modules/ejs/bin/cli.js
    /tmp/resources/app/node_modules/ejs/bin/cli.js
    1⤵
      PID:805
    • /usr/local/sbin/node
      node /tmp/resources/app/node_modules/ejs/bin/cli.js
      1⤵
      • Command and Scripting Interpreter: JavaScript
      PID:805
    • /usr/local/bin/node
      node /tmp/resources/app/node_modules/ejs/bin/cli.js
      1⤵
      • Command and Scripting Interpreter: JavaScript
      PID:805
    • /usr/sbin/node
      node /tmp/resources/app/node_modules/ejs/bin/cli.js
      1⤵
      • Command and Scripting Interpreter: JavaScript
      PID:805
    • /usr/bin/node
      node /tmp/resources/app/node_modules/ejs/bin/cli.js
      1⤵
      • Command and Scripting Interpreter: JavaScript
      PID:805
    • /sbin/node
      node /tmp/resources/app/node_modules/ejs/bin/cli.js
      1⤵
      • Command and Scripting Interpreter: JavaScript
      PID:805
    • /bin/node
      node /tmp/resources/app/node_modules/ejs/bin/cli.js
      1⤵
      • Command and Scripting Interpreter: JavaScript
      PID:805

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads