Analysis
- user interaction
yes - max time kernel
1s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
- submitted
14/07/2026, 14:06
General
- Target code.js
- Size 2KB
- Sample260714-reqw9ses7q
- SHA256 2e2159b27f3d27ad4a93f260b90b99e82537a92f8d9819100e0c6b57c9e00474
Score
4/10
Malware Config
Signatures
- Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
- Reads CPU attributes 1 TTPs 1 IoCs
- Command and Scripting Interpreter: JavaScript 1 TTPs 1 IoCs
Execution via JavaScript.
- Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
- Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/usr/bin/nodenode /tmp/code.js1⤵
- Checks CPU configuration
- Reads CPU attributes
- Command and Scripting Interpreter: JavaScript
- Enumerates kernel/hardware configuration
- Reads runtime system information