Analysis
-
max time kernel
15s -
max time network
1680s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240611-en -
resource tags
arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
24/10/2024, 10:46
Static task
static1
Behavioral task
behavioral1
Sample
Login.js
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
Login.js
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral3
Sample
Login.js
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral4
Sample
Login.js
Resource
debian9-mipsel-20240611-en
General
-
Target
Login.js
-
Size
79KB
-
MD5
b8149a836d28e019c94e88884cc435a8
-
SHA1
1da9bb2ec289e1e776881aa466369b5a76b013b7
-
SHA256
d65ed7d2183598f005350b2dfaf60d9222881b7e68d5f92986f46ce7bac7eaac
-
SHA512
9ebd94349f18c31aec4782063d680c6e267a809c76bda7e8b4ee59063a23c25825317044a67d734e2f4eed6c24441c1a3131b0620669dc6772637a8f9576a8dd
-
SSDEEP
1536:+sFLwCwNieefUhNFZuSuAtWWx+LweIg3io/fMwohoH18cjqWNEkSap5CO6ZsnfJQ:LFLXwkImouH18cjqWNEkSap5CO6Zsnf2
Malware Config
Signatures
-
Changes its process name 4 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 719 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 720 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 722 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 724 nodejs -
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo nodejs