Overview

overview

4

Static

static

3

ZenithMacr...m.html

windows10-2004-x64

ZenithMacr...m.html

windows11-ltsc_2024-x64

3

ZenithMacr...dex.js

windows10-2004-x64

3

ZenithMacr...dex.js

windows11-ltsc_2024-x64

3

ZenithMacr...dex.js

windows10-2004-x64

3

ZenithMacr...dex.js

windows11-ltsc_2024-x64

3

ZenithMacr...dex.js

windows10-2004-x64

3

ZenithMacr...dex.js

windows11-ltsc_2024-x64

3

ZenithMacr...ing.js

windows10-2004-x64

3

ZenithMacr...ing.js

windows11-ltsc_2024-x64

3

ZenithMacr...ion.js

windows10-2004-x64

3

ZenithMacr...ion.js

windows11-ltsc_2024-x64

3

ZenithMacr...dex.js

windows10-2004-x64

3

ZenithMacr...dex.js

windows11-ltsc_2024-x64

3

ZenithMacr...inl.js

windows10-2004-x64

3

ZenithMacr...inl.js

windows11-ltsc_2024-x64

3

ZenithMacr...api.js

windows10-2004-x64

3

ZenithMacr...api.js

windows11-ltsc_2024-x64

3

ZenithMacr...api.js

windows10-2004-x64

3

ZenithMacr...api.js

windows11-ltsc_2024-x64

3

ZenithMacr...ion.js

windows10-2004-x64

3

ZenithMacr...ion.js

windows11-ltsc_2024-x64

3

ZenithMacr...bin.js

ubuntu-18.04-amd64

3

ZenithMacr...bin.js

debian-9-armhf

4

ZenithMacr...bin.js

debian-9-mips

3

ZenithMacr...bin.js

debian-9-mipsel

3

ZenithMacr...dex.js

windows10-2004-x64

3

ZenithMacr...dex.js

windows11-ltsc_2024-x64

3

ZenithMacr...dex.js

windows10-2004-x64

3

ZenithMacr...dex.js

windows11-ltsc_2024-x64

3

ZenithMacr...dex.js

windows10-2004-x64

3

ZenithMacr...dex.js

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    3s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20260513-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    05/09/2026, 02:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ZenithMacros-1.1.6-Unlocked/source/node_modules/node-gyp-build/bin.js
  • Size 2KB
  • Sample260905-cvtkrsbe25
  • SHA256 dc022adc093b9b79e1a0ef4b6bc3e6a52e3d627102113dad4afacbbe81f13a26
  • MD5 SHA1 SHA512 TLSH
Score
3/10
execution

Malware Config

Signatures

  • Command and Scripting Interpreter: JavaScript 1 TTPs 6 IoCs

    Execution via JavaScript.

    execution

Processes

  • /tmp/ZenithMacros-1.1.6-Unlocked/source/node_modules/node-gyp-build/bin.js
    /tmp/ZenithMacros-1.1.6-Unlocked/source/node_modules/node-gyp-build/bin.js
    1⤵
      PID:803
    • /usr/local/sbin/node
      node /tmp/ZenithMacros-1.1.6-Unlocked/source/node_modules/node-gyp-build/bin.js
      1⤵
      • Command and Scripting Interpreter: JavaScript
      PID:803
    • /usr/local/bin/node
      node /tmp/ZenithMacros-1.1.6-Unlocked/source/node_modules/node-gyp-build/bin.js
      1⤵
      • Command and Scripting Interpreter: JavaScript
      PID:803
    • /usr/sbin/node
      node /tmp/ZenithMacros-1.1.6-Unlocked/source/node_modules/node-gyp-build/bin.js
      1⤵
      • Command and Scripting Interpreter: JavaScript
      PID:803
    • /usr/bin/node
      node /tmp/ZenithMacros-1.1.6-Unlocked/source/node_modules/node-gyp-build/bin.js
      1⤵
      • Command and Scripting Interpreter: JavaScript
      PID:803
    • /sbin/node
      node /tmp/ZenithMacros-1.1.6-Unlocked/source/node_modules/node-gyp-build/bin.js
      1⤵
      • Command and Scripting Interpreter: JavaScript
      PID:803
    • /bin/node
      node /tmp/ZenithMacros-1.1.6-Unlocked/source/node_modules/node-gyp-build/bin.js
      1⤵
      • Command and Scripting Interpreter: JavaScript
      PID:803

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads