Analysis
- max time kernel
18s - max time network
132s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20261019-en - resource tags
- submitted
27/10/2026, 07:48
General
- Target Api-Server/bin/server.js
- Size 512B
- Sample261027-jm6npada49
- SHA256 05778e8903cf5fc46474fad2a4b487567d0b405d41087f9a35d7a39729bf6ef0
Score
3/10
Malware Config
Signatures
- Command and Scripting Interpreter: JavaScript 1 TTPs 4 IoCs
Execution via JavaScript.
- Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
- Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/Api-Server/bin/server.js/tmp/Api-Server/bin/server.js1⤵
-
/usr/local/sbin/nodenode /tmp/Api-Server/bin/server.js1⤵
- Command and Scripting Interpreter: JavaScript
-
/usr/local/bin/nodenode /tmp/Api-Server/bin/server.js1⤵
- Command and Scripting Interpreter: JavaScript
-
/usr/sbin/nodenode /tmp/Api-Server/bin/server.js1⤵
- Command and Scripting Interpreter: JavaScript
-
/usr/bin/nodenode /tmp/Api-Server/bin/server.js1⤵
- Command and Scripting Interpreter: JavaScript
- Enumerates kernel/hardware configuration
- Reads runtime system information