Analysis
- max time kernel
3s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
- submitted
22/10/2026, 20:32
General
- Target vscode-pylint-main/.githooks/pre-commit
- Size 156B
- Sample261022-zbk6lstyfv
- SHA256 8731e9106b4b22fa6a6d8a7f4ce010ec4106be013fc93488ebbd72413c5dc419
Score
4/10
Malware Config
Signatures
- Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
- Reads CPU attributes 1 TTPs 1 IoCs
- Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
- Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/vscode-pylint-main/.githooks/pre-commit/tmp/vscode-pylint-main/.githooks/pre-commit1⤵
-
/usr/local/sbin/nodenode build/normalize-package-lock.js --staged1⤵
-
/usr/local/bin/nodenode build/normalize-package-lock.js --staged1⤵
-
/usr/sbin/nodenode build/normalize-package-lock.js --staged1⤵
-
/usr/bin/nodenode build/normalize-package-lock.js --staged1⤵
- Checks CPU configuration
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information