797ef16ddd023778515b4ec360a8307991667738523bc1a5595f2abb7750bbf7

Analysis

max time kernel
15s
max time network
35s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
15/08/2026, 04:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
txt pcap.js
Size 33KB
Sample260815-e1ls8ayfma
SHA256 797ef16ddd023778515b4ec360a8307991667738523bc1a5595f2abb7750bbf7
MD5 dd6dbfb7733352324d20fa7c0283b4f6
SHA1 3dd7048645ef73efa309a00a2b69592c85a8d648
SHA512 5f6a34c68ee45835e565282bbc9438b6917666f52e90eab6c9e769438d65b5ed530ddb7cfa9590adac6b135c96a2b4b909ece8d91f1e064c398883b688a2278b
SSDEEP 384:9jcI4kJvhPRRhqLdyh0fVn3K348ENVbRxcjkvEy:TvhP3adyef9LfVbTokvt
TLSH
T1E9F29B9D468404DD399EF7E958C08EBEF30EDFB61731E86B2072C0D6D3BA729A545848
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

antivm

Malware Config

Signatures

Changes its process name 4 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	720	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	724	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	725	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	727	nodejs

Checks CPU configuration 1 TTPs 1 IoCs

Checks CPU information which indicate if the system is a virtual machine.

antivm

System Checks

T1497.001

description	ioc	Process
File opened for reading	/proc/cpuinfo	nodejs

/usr/bin/nodejs
nodejs "/tmp/txt pcap.js"
1⤵
- Changes its process name
- Checks CPU configuration
PID:714

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads