Analysis
-
max time kernel
4s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
21-11-2024 17:12
Static task
static1
Behavioral task
behavioral1
Sample
main (4).js
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
main (4).js
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
main (4).js
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral4
Sample
main (4).js
Resource
debian9-mipsel-20240418-en
General
-
Target
main (4).js
-
Size
5KB
-
MD5
55a088c9de4889b4cfee7f7f215d935b
-
SHA1
b332936482e518c425bf034490986539d4f5a794
-
SHA256
62b8eaa696fe39f632988cf827a2a74badaff1e9ec016bcc63364165a52e614b
-
SHA512
a29c7d6a40501149e985d7f357f4a360b8c4ab807ee86bf63c46825e74eeaf7ffec153b2e6f55835b9573e191389d5570276894733585f9ba92decafb1b2a6b8
-
SSDEEP
96:hjNP8+26kBzi2OTbCyijviynuCiUaSNFD+UyZgD8FtTSSKN2hiSCDb:K/zi2OXCyijiyviXcFD+UyZq8FtTSSKB
Malware Config
Signatures
-
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
Processes:
nodedescription ioc process File opened for reading /proc/cpuinfo node -
Reads CPU attributes 1 TTPs 1 IoCs
Processes:
nodedescription ioc process File opened for reading /sys/devices/system/cpu/online node -
Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
Processes:
nodedescription ioc process File opened for reading /sys/fs/cgroup/memory/memory.limit_in_bytes node -
Processes:
nodedescription ioc process File opened for reading /proc/meminfo node