Analysis
-
max time kernel
4s -
max time network
1679s -
platform
debian-9_armhf -
resource
debian9-armhf-20240729-en -
resource tags
arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
24/10/2024, 10:46
Static task
static1
Behavioral task
behavioral1
Sample
Login.js
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
Login.js
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral3
Sample
Login.js
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral4
Sample
Login.js
Resource
debian9-mipsel-20240611-en
General
-
Target
Login.js
-
Size
79KB
-
MD5
b8149a836d28e019c94e88884cc435a8
-
SHA1
1da9bb2ec289e1e776881aa466369b5a76b013b7
-
SHA256
d65ed7d2183598f005350b2dfaf60d9222881b7e68d5f92986f46ce7bac7eaac
-
SHA512
9ebd94349f18c31aec4782063d680c6e267a809c76bda7e8b4ee59063a23c25825317044a67d734e2f4eed6c24441c1a3131b0620669dc6772637a8f9576a8dd
-
SSDEEP
1536:+sFLwCwNieefUhNFZuSuAtWWx+LweIg3io/fMwohoH18cjqWNEkSap5CO6ZsnfJQ:LFLXwkImouH18cjqWNEkSap5CO6Zsnf2
Malware Config
Signatures
-
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo node -
Reads CPU attributes 1 TTPs 1 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/online node -
pid Process 656 node -
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/cgroup/memory/memory.limit_in_bytes node -
description ioc Process File opened for reading /proc/meminfo node