Analysis

  • max time kernel
    7s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20260513-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    20/08/2026, 18:58

General

  • Target
    www/csv-parse-sync.js
  • Size 47KB
  • Sample260820-xmglfstepa
  • SHA256 2c13bca4c65a1ea9c6b97c051af7cc3b5fd6f3774b6de8a3ae63c46a71cebb59
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Changes its process name 4 IoCs
  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

Processes

  • /usr/bin/nodejs
    nodejs /tmp/www/csv-parse-sync.js
    1⤵
    • Changes its process name
    • Checks CPU configuration
    PID:825

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads