Overview
overview
4Static
static
1ebook-sma/...ing.js
windows10-2004-x64
3ebook-sma/...ing.js
windows11-21h2-x64
3ebook-sma/...oks.js
windows10-2004-x64
3ebook-sma/...oks.js
windows11-21h2-x64
3ebook-sma/...gin.js
windows10-2004-x64
3ebook-sma/...gin.js
windows11-21h2-x64
3ebook-sma/...ter.js
windows10-2004-x64
3ebook-sma/...ter.js
windows11-21h2-x64
3ebook-sma/...on.ps1
windows10-2004-x64
3ebook-sma/...on.ps1
windows11-21h2-x64
3ebook-sma/...bug.js
windows10-2004-x64
3ebook-sma/...bug.js
windows11-21h2-x64
3ebook-sma/...0.html
windows10-2004-x64
4ebook-sma/...0.html
windows11-21h2-x64
4ebook-sma/...4.html
windows10-2004-x64
4ebook-sma/...4.html
windows11-21h2-x64
4ebook-sma/...on.ps1
windows10-2004-x64
3ebook-sma/...on.ps1
windows11-21h2-x64
3ebook-sma/...n.html
windows10-2004-x64
4ebook-sma/...n.html
windows11-21h2-x64
4ebook-sma/...n.html
windows10-2004-x64
4ebook-sma/...n.html
windows11-21h2-x64
4ebook-sma/...oks.js
windows10-2004-x64
3ebook-sma/...oks.js
windows11-21h2-x64
3ebook-sma/...x.html
windows10-2004-x64
4ebook-sma/...x.html
windows11-21h2-x64
4ebook-sma/...app.js
windows10-2004-x64
3ebook-sma/...app.js
windows11-21h2-x64
3ebook-sma/spark
ubuntu-18.04-amd64
1ebook-sma/spark
debian-9-armhf
1ebook-sma/spark
debian-9-mips
1ebook-sma/spark
debian-9-mipsel
1Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260126-en - resource tags
arch:armhfimage:debian9-armhf-20260126-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
21/04/2026, 18:21
Static task
static1
Behavioral task
behavioral1
Sample
ebook-sma/app/Config/Routing.js
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
ebook-sma/app/Config/Routing.js
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
ebook-sma/app/Views/admin/ebooks.js
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
ebook-sma/app/Views/admin/ebooks.js
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
ebook-sma/app/Views/auth/login.js
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
ebook-sma/app/Views/auth/login.js
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
ebook-sma/app/Views/auth/register.js
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
ebook-sma/app/Views/auth/register.js
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
ebook-sma/app/Views/errors/cli/error_exception.ps1
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
ebook-sma/app/Views/errors/cli/error_exception.ps1
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
ebook-sma/app/Views/errors/html/debug.js
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
ebook-sma/app/Views/errors/html/debug.js
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
ebook-sma/app/Views/errors/html/error_400.html
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
ebook-sma/app/Views/errors/html/error_400.html
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
ebook-sma/app/Views/errors/html/error_404.html
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
ebook-sma/app/Views/errors/html/error_404.html
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
ebook-sma/app/Views/errors/html/error_exception.ps1
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
ebook-sma/app/Views/errors/html/error_exception.ps1
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
ebook-sma/app/Views/errors/html/production.html
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
ebook-sma/app/Views/errors/html/production.html
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral21
Sample
ebook-sma/app/Views/layout/main.html
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
ebook-sma/app/Views/layout/main.html
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral23
Sample
ebook-sma/app/Views/user/ebooks.js
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
ebook-sma/app/Views/user/ebooks.js
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral25
Sample
ebook-sma/app/index.html
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
ebook-sma/app/index.html
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral27
Sample
ebook-sma/public/assets/js/app.js
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
ebook-sma/public/assets/js/app.js
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral29
Sample
ebook-sma/spark
Resource
ubuntu1804-amd64-20260126-en
ubuntu-18.04-amd64
Behavioral task
behavioral30
Sample
ebook-sma/spark
Resource
debian9-armhf-20260126-en
debian-9-armhf
Behavioral task
behavioral31
Sample
ebook-sma/spark
Resource
debian9-mipsbe-20260126-en
debian-9-mips
Behavioral task
behavioral32
Sample
ebook-sma/spark
Resource
debian9-mipsel-20260126-en
debian-9-mipsel
General
- Target ebook-sma/spark
- Size 2KB
- Sample260421-wzerysd16v
- SHA256 10b3b8cc982064a0e32e373f589b0aca25740a25588f122e8f54fa2e1ecb6073
- MD5 5f0d83e86645d598a0c4476154f071b7
- SHA1 c5ea3cb0b3a0fa6cf59fd1d3f7441f96e9f5382c
- SHA512 a89c31ef8ba2d07937fe44985c9082448bf264b6ba3fc93efd78e3a52f0aed66be8f4806b08847949251d29876e947541ec672c494ea063ceef13741c620819b
- TLSH T1C15173057DA5572341F1DBA3270E4266C326A2BDB3507711AC1D52084BE5A9C837EEFB
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
Processes
-
/tmp/ebook-sma/spark/tmp/ebook-sma/spark1⤵PID:666
-
/usr/local/sbin/phpphp /tmp/ebook-sma/spark1⤵PID:666
-
/usr/local/bin/phpphp /tmp/ebook-sma/spark1⤵PID:666
-
/usr/sbin/phpphp /tmp/ebook-sma/spark1⤵PID:666
-
/usr/bin/phpphp /tmp/ebook-sma/spark1⤵PID:666
-
/sbin/phpphp /tmp/ebook-sma/spark1⤵PID:666
-
/bin/phpphp /tmp/ebook-sma/spark1⤵PID:666