Analysis
-
max time kernel
14s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240418-en -
resource tags
arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
21-11-2024 17:12
Static task
static1
Behavioral task
behavioral1
Sample
main (4).js
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
main (4).js
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
main (4).js
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral4
Sample
main (4).js
Resource
debian9-mipsel-20240418-en
General
-
Target
main (4).js
-
Size
5KB
-
MD5
55a088c9de4889b4cfee7f7f215d935b
-
SHA1
b332936482e518c425bf034490986539d4f5a794
-
SHA256
62b8eaa696fe39f632988cf827a2a74badaff1e9ec016bcc63364165a52e614b
-
SHA512
a29c7d6a40501149e985d7f357f4a360b8c4ab807ee86bf63c46825e74eeaf7ffec153b2e6f55835b9573e191389d5570276894733585f9ba92decafb1b2a6b8
-
SSDEEP
96:hjNP8+26kBzi2OTbCyijviynuCiUaSNFD+UyZgD8FtTSSKN2hiSCDb:K/zi2OXCyijiyviXcFD+UyZq8FtTSSKB
Malware Config
Signatures
-
Changes its process name 4 IoCs
Processes:
nodejsdescription ioc pid process Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 725 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 727 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 728 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 730 nodejs -
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
Processes:
nodejsdescription ioc process File opened for reading /proc/cpuinfo nodejs