Overview

overview

8

Static

static

1

.js

macos-10.15-amd64

8

.js

ubuntu-18.04-amd64

3

.js

debian-9-armhf

4

.js

debian-9-mips

4

.js

debian-9-mipsel

4

Analysis

  • max time kernel
    0s
  • max time network
    898s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    28/03/2025, 11:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    .js

  • Size

    14KB

  • MD5

    c0212db924137a13a9d05f77c80615d4

  • SHA1

    a86cb77e87edee02c6e4a608cb351c4acd511114

  • SHA256

    a380c0bf94cd2a468afa9f52e4153009b32aee9cab9db0f2934488f98fa86dfa

  • SHA512

    535466afce1bbf4eebad0cff24cdbca0210677786af0b2a90a721d150fb3e140eae61ee0dda45fdb47acb95771eee1abe231638ea0a4518e17ccbb3a39c1ac3b

  • SSDEEP

    192:ikqQzTr+0av+IF0qwgizuCauAl+e13u3xF+BkhzJIIMr4QJlp6x:GaTo0VAluh0ix

Score
3/10
discoveryexecution

Malware Config

Signatures

  • Command and Scripting Interpreter: JavaScript 1 TTPs 1 IoCs

    Execution via JavaScript.

    execution
  • Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

    discovery
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /usr/bin/node
    node /tmp/.js
    1⤵
    • Command and Scripting Interpreter: JavaScript
    • Enumerates kernel/hardware configuration
    • Reads runtime system information
    PID:1498

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads