Analysis

  • max time kernel
    4s
  • max time network
    1679s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240729-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    24/10/2024, 10:46

General

  • Target

    Login.js

  • Size

    79KB

  • MD5

    b8149a836d28e019c94e88884cc435a8

  • SHA1

    1da9bb2ec289e1e776881aa466369b5a76b013b7

  • SHA256

    d65ed7d2183598f005350b2dfaf60d9222881b7e68d5f92986f46ce7bac7eaac

  • SHA512

    9ebd94349f18c31aec4782063d680c6e267a809c76bda7e8b4ee59063a23c25825317044a67d734e2f4eed6c24441c1a3131b0620669dc6772637a8f9576a8dd

  • SSDEEP

    1536:+sFLwCwNieefUhNFZuSuAtWWx+LweIg3io/fMwohoH18cjqWNEkSap5CO6ZsnfJQ:LFLXwkImouH18cjqWNEkSap5CO6Zsnf2

Malware Config

Signatures

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Reads CPU attributes 1 TTPs 1 IoCs
  • Command and Scripting Interpreter: JavaScript 1 TTPs 1 IoCs

    Execution via JavaScript.

  • Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /usr/bin/node
    node /tmp/Login.js
    1⤵
    • Checks CPU configuration
    • Reads CPU attributes
    • Command and Scripting Interpreter: JavaScript
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:656

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads