Analysis
-
max time kernel
21s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240226-en -
resource tags
arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
28/03/2025, 11:22
Static task
static1
Behavioral task
behavioral1
Sample
.js
Resource
macos-20241106-en
Behavioral task
behavioral2
Sample
.js
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral3
Sample
.js
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral4
Sample
.js
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral5
Sample
.js
Resource
debian9-mipsel-20240226-en
General
-
Target
.js
-
Size
14KB
-
MD5
c0212db924137a13a9d05f77c80615d4
-
SHA1
a86cb77e87edee02c6e4a608cb351c4acd511114
-
SHA256
a380c0bf94cd2a468afa9f52e4153009b32aee9cab9db0f2934488f98fa86dfa
-
SHA512
535466afce1bbf4eebad0cff24cdbca0210677786af0b2a90a721d150fb3e140eae61ee0dda45fdb47acb95771eee1abe231638ea0a4518e17ccbb3a39c1ac3b
-
SSDEEP
192:ikqQzTr+0av+IF0qwgizuCauAl+e13u3xF+BkhzJIIMr4QJlp6x:GaTo0VAluh0ix
Malware Config
Signatures
-
Changes its process name 4 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 718 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 719 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 720 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 722 nodejs -
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo nodejs