Analysis
- max time kernel
3s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
- submitted
27/10/2026, 07:50
General
- Target Backend Car Rentel/backend/node_modules/.bin/mime
- Size 371B
- Sample261027-jphpmsbv4v
- SHA256 394b93eaaac25f18a20d7cdd80920ecca1fe43c8e5b37501389e644944c6e01f
Score
4/10
Malware Config
Signatures
- Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
- Reads CPU attributes 1 TTPs 1 IoCs
- Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
- Reads runtime system information 2 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/Backend Car Rentel/backend/node_modules/.bin/mime"/tmp/Backend Car Rentel/backend/node_modules/.bin/mime"1⤵
-
/bin/sedsed -e "s,\\\\,/,g"2⤵
- Reads runtime system information
-
-
/usr/bin/dirnamedirname "/tmp/Backend Car Rentel/backend/node_modules/.bin/mime"2⤵
-
-
/bin/unameuname2⤵
-
-
/usr/local/sbin/nodenode "/tmp/Backend Car Rentel/backend/node_modules/.bin/../mime/cli.js"1⤵
-
/usr/local/bin/nodenode "/tmp/Backend Car Rentel/backend/node_modules/.bin/../mime/cli.js"1⤵
-
/usr/sbin/nodenode "/tmp/Backend Car Rentel/backend/node_modules/.bin/../mime/cli.js"1⤵
-
/usr/bin/nodenode "/tmp/Backend Car Rentel/backend/node_modules/.bin/../mime/cli.js"1⤵
- Checks CPU configuration
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information