Analysis
- max time kernel
4s - max time network
22s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
- submitted
15/08/2026, 04:24
General
- Target txt pcap.js
- Size 33KB
- Sample260815-e1ls8ayfma
- SHA256 797ef16ddd023778515b4ec360a8307991667738523bc1a5595f2abb7750bbf7
Score
4/10
Malware Config
Signatures
- Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
- Reads CPU attributes 1 TTPs 1 IoCs
- Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
- Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/usr/bin/nodenode "/tmp/txt pcap.js"1⤵
- Checks CPU configuration
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information