Analysis
-
max time kernel
14s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
27/10/2024, 21:52
Static task
static1
Behavioral task
behavioral1
Sample
Linux.BotenaGo.js
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
Linux.BotenaGo.js
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
Linux.BotenaGo.js
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
Linux.BotenaGo.js
Resource
debian9-mipsel-20240226-en
General
-
Target
Linux.BotenaGo.js
-
Size
96KB
-
MD5
f2d2cd251e1517ddde728b2a2e32c86c
-
SHA1
216fc19d7a7fc19bbabffea2e0cfd45e252359a1
-
SHA256
354e25b8537255b9ec4bf63c0cb833d6c7e8e4bb7518c9c11f8882e692fe446f
-
SHA512
2164a502213287bc329cf86f0f5f1a986e896b9b7d46ae01bba3090b304084f157658257185f15bc61dc7c0db859257fb05844fa688cc997a3a532a7795e71f6
-
SSDEEP
1536:pXYnXsje+9sKmKiUaXIDobSZLloiUFTyKRn2N3wjLHDzSRVk2Jr0jeS:p6S9loBTyK5H6dJAaS
Malware Config
Signatures
-
Changes its process name 4 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 718 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 720 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 722 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 723 nodejs -
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo nodejs