Resubmissions

21-11-2024 17:12

241121-vq8g8stndx 3

21-11-2024 17:12

241121-vqv7xatndw 4

Analysis

  • max time kernel
    4s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    21-11-2024 17:12

General

  • Target

    main (4).js

  • Size

    5KB

  • MD5

    55a088c9de4889b4cfee7f7f215d935b

  • SHA1

    b332936482e518c425bf034490986539d4f5a794

  • SHA256

    62b8eaa696fe39f632988cf827a2a74badaff1e9ec016bcc63364165a52e614b

  • SHA512

    a29c7d6a40501149e985d7f357f4a360b8c4ab807ee86bf63c46825e74eeaf7ffec153b2e6f55835b9573e191389d5570276894733585f9ba92decafb1b2a6b8

  • SSDEEP

    96:hjNP8+26kBzi2OTbCyijviynuCiUaSNFD+UyZgD8FtTSSKN2hiSCDb:K/zi2OXCyijiyviXcFD+UyZq8FtTSSKB

Score
4/10

Malware Config

Signatures

  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Reads CPU attributes 1 TTPs 1 IoCs
  • Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /usr/bin/node
    node "/tmp/main (4).js"
    1⤵
    • Checks CPU configuration
    • Reads CPU attributes
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:652

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads