9c0835f33c1a30bf73af4df49be7283c2a78af532996f6df09426948dfc64862

Analysis

max time kernel
0s
max time network
128s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20260127-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20260127-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
22/07/2026, 03:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
folder short.js
Size 35B
Sample260722-efm6jsvwex
SHA256 9c0835f33c1a30bf73af4df49be7283c2a78af532996f6df09426948dfc64862
MD5 c732aa82094de9d0178474fe63214083
SHA1 44c335ec84b14f446faa0641cefe9260b0f3cbdb
SHA512 ff963cc9a10367a875aca6987c9abe9c75f190dbbf5d25f0594a4e62d21b43bdf2b636d5796114052ec6c394881e27f7d3d7a6284eca54c759f17cbf0f0b66c6
MD5 SHA1 SHA512

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 2 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/memory.max	node
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/memory.high	node

Reads runtime system information 3 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/cgroup	node
File opened for reading	/proc/meminfo	node
File opened for reading	/proc/self/maps	node

/usr/bin/node
node "/tmp/folder short.js"
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2557

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads