8e8b90dedd456ded0c5748119836e1ca1066112bc569c1b41ca70eb931d1d4dc

Resubmissions

31/07/2026, 07:03

260731-hvq3jacj6y4

31/07/2026, 07:02

260731-htye8aee654

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20260513-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
31/07/2026, 07:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.cjs.js
Size 44KB
Sample260731-htye8aee65
SHA256 8e8b90dedd456ded0c5748119836e1ca1066112bc569c1b41ca70eb931d1d4dc
MD5 e7d70f16df21a2c4c8a86fb31d97beb7
SHA1 292719fc1df6e53dbc165c3d1ef9e6aeefff0ee8
SHA512 a0f7404faec02387c989681c7d4c52f39004777ba4d9b52f50d946552097e30fe01421bbe96459b9e81083273e85680fa28c8bc43d771250673c06056bf44c16
SSDEEP 768:1FoFXufWPI5060Pk6rbc9B3dFLpi4bsYTco9OpQXsXX0Gn+hqcezHYLrUtlmMFkF:12YfWI0PiQb0YYrulrt8
TLSH
T11423C718EAE22101A403B06DFA9B9107673EA1476909DDD4FBCFA00B7F9A55C65F3BC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs 1 IoCs

Execution via JavaScript.

execution

JavaScript

T1059.007

pid	Process
1613	node

Enumerates kernel/hardware configuration 1 TTPs 2 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/memory.max	node
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/memory.high	node

Reads runtime system information 3 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/cgroup	node
File opened for reading	/proc/meminfo	node
File opened for reading	/proc/self/maps	node

/usr/bin/node
node node /tmp/index.cjs.js
1⤵
- Command and Scripting Interpreter: JavaScript
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1613

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads