6792d2d35d1f2a9dbe58b8b1e98f05ba5419bf7775d1520410069715ed891038

Analysis

max time kernel
1s
platform
debian-9_mipsel
resource
debian9-mipsel-20240611-en
resource tags

arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
07/11/2024, 10:15

Target
RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/node-gyp-build-test
Size 324B
Sample241107-maftaazlay
SHA256 5afc301d22d0441c71ce3277c844fc066029e715698f09e769cff83b562695c9
MD5 f87430448b9c6fa9d758d12638d01488
SHA1 2cd0d4c025a0caaf193b4a15eaf3f6ff0b4c2fa0
SHA512 1e402544e068dbd86c058a0a48decce1ec58bd5079be2469d918d8b9601444c158b8d7bb05b87126f7495713583b2944dd84bad24f21353c65f3f32c09075206
MD5 SHA1 SHA512

Score

3^/10

discovery

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/filesystems	sed

/tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/node-gyp-build-test
/tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/node-gyp-build-test
1⤵
PID:723
- /bin/sed
  sed -e "s,\\\\,/,g"
  2⤵
  - Reads runtime system information
  PID:728
- /usr/bin/dirname
  dirname /tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/node-gyp-build-test
  2⤵
  PID:725
- /bin/uname
  uname
  2⤵
  PID:733

/usr/local/sbin/node
node /tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/../node-gyp-build/build-test.js
1⤵
PID:723

/usr/local/bin/node
node /tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/../node-gyp-build/build-test.js
1⤵
PID:723

/usr/sbin/node
node /tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/../node-gyp-build/build-test.js
1⤵
PID:723

/usr/bin/node
node /tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/../node-gyp-build/build-test.js
1⤵
PID:723

/sbin/node
node /tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/../node-gyp-build/build-test.js
1⤵
PID:723

/bin/node
node /tmp/RevokeMsgPatcher.v2.0/LiteLoaderQQNT/plugins/qq-anti-recall/node_modules/.bin/../node-gyp-build/build-test.js
1⤵
PID:723