Analysis
-
max time kernel
10s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240418-en -
resource tags
arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
26/03/2025, 20:06
Static task
static1
Behavioral task
behavioral1
Sample
d97ed891571c80a41b5ff24b9aa5ce03/asset.js
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
d97ed891571c80a41b5ff24b9aa5ce03/asset.js
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
d97ed891571c80a41b5ff24b9aa5ce03/asset.js
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
d97ed891571c80a41b5ff24b9aa5ce03/asset.js
Resource
debian9-mipsel-20240418-en
General
-
Target
d97ed891571c80a41b5ff24b9aa5ce03/asset.js
-
Size
449B
-
MD5
9868e8b8264ff51bd787bcd61a58b2dc
-
SHA1
7ce26f0cbcbf3a2c6f3864c5ab4d96aadafde31f
-
SHA256
6c06bcc150f8dac1e8129547f43ed69a6e45677c6bad20c2ffe3a0c3f832d9ee
-
SHA512
bc9daf256279ff8508479ea4a149d589bac3578f9f50c33512fb91a1694e65b9556c71b67b88ac9edb18cf54b9b6ac4df45aa8d7df10f6f26e3b2ff0297ae592
Malware Config
Signatures
-
Changes its process name 4 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 709 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 713 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 714 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 716 nodejs -
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo nodejs