6792d2d35d1f2a9dbe58b8b1e98f05ba5419bf7775d1520410069715ed891038

Analysis

max time kernel
1s
platform
debian-9_mipsel
resource
debian9-mipsel-20240611-en
resource tags

arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
07/11/2024, 10:15

Target
RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/node-gyp-build-optional
Size 320B
Sample241107-maftaazlay
SHA256 7a2579617eebed9e4a7d860a2c0e149d0236117810d1c53a0a7041737bed5ec1
MD5 c13608407ba10ce1acffd1a92455ae71
SHA1 1a9e2cc78d977b02068b7fc93dd95c183a13a5f6
SHA512 3ad46ce9cb92eb1eb5435c2fdc4ec3b1d199e1aa69a4bc2f8fbdace18322548f40433a044c9849dcd267bcadc98bbfc5c1f2b9553c11155376c2786691450343
MD5 SHA1 SHA512

Score

3^/10

discovery

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/filesystems	sed

/tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/node-gyp-build-optional
/tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/node-gyp-build-optional
1⤵
PID:724
- /bin/sed
  sed -e "s,\\\\,/,g"
  2⤵
  - Reads runtime system information
  PID:730
- /usr/bin/dirname
  dirname /tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/node-gyp-build-optional
  2⤵
  PID:727
- /bin/uname
  uname
  2⤵
  PID:734

/usr/local/sbin/node
node /tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/../node-gyp-build/optional.js
1⤵
PID:724

/usr/local/bin/node
node /tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/../node-gyp-build/optional.js
1⤵
PID:724

/usr/sbin/node
node /tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/../node-gyp-build/optional.js
1⤵
PID:724

/usr/bin/node
node /tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/../node-gyp-build/optional.js
1⤵
PID:724

/sbin/node
node /tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/../node-gyp-build/optional.js
1⤵
PID:724

/bin/node
node /tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/../node-gyp-build/optional.js
1⤵
PID:724