cd5ca2f059e780c0a4b1aa9cdd6edc7dc10413d30bf51ad537adbd428e5e7a16

Login
Reports

Overview

overview

Static

static

Backend Ca.../db.js

windows10-2004-x64

Backend Ca.../db.js

windows11-ltsc_2024-x64

Backend Ca...are.js

windows10-2004-x64

Backend Ca...are.js

windows11-ltsc_2024-x64

Backend Ca...Car.js

windows10-2004-x64

Backend Ca...Car.js

windows11-ltsc_2024-x64

Backend Ca...tal.js

windows10-2004-x64

Backend Ca...tal.js

windows11-ltsc_2024-x64

Backend Ca...ser.js

windows10-2004-x64

Backend Ca...ser.js

windows11-ltsc_2024-x64

Backend Ca...n/mime

ubuntu-18.04-amd64

Backend Ca...n/mime

debian-9-armhf

Backend Ca...n/mime

debian-9-mips

Backend Ca...n/mime

debian-9-mipsel

Backend Ca...me.cmd

windows10-2004-x64

Backend Ca...me.cmd

windows11-ltsc_2024-x64

Backend Ca...me.ps1

ubuntu-18.04-amd64

Backend Ca...me.ps1

debian-9-armhf

Backend Ca...me.ps1

debian-9-mips

Backend Ca...me.ps1

debian-9-mipsel

Backend Ca...odemon

ubuntu-18.04-amd64

Backend Ca...odemon

debian-9-armhf

Backend Ca...odemon

debian-9-mips

Backend Ca...odemon

debian-9-mipsel

Backend Ca...on.cmd

windows10-2004-x64

Backend Ca...on.cmd

windows11-ltsc_2024-x64

Backend Ca...on.ps1

ubuntu-18.04-amd64

Backend Ca...on.ps1

debian-9-armhf

Backend Ca...on.ps1

debian-9-mips

Backend Ca...on.ps1

debian-9-mipsel

Backend Ca...etouch

ubuntu-18.04-amd64

Backend Ca...etouch

debian-9-armhf

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 07:50

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Backend Car Rentel/backend/config/db.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral2

Sample

Backend Car Rentel/backend/config/db.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral3

Sample

Backend Car Rentel/backend/middleware/authMiddleware.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral4

Sample

Backend Car Rentel/backend/middleware/authMiddleware.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral5

Sample

Backend Car Rentel/backend/models/Car.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral6

Sample

Backend Car Rentel/backend/models/Car.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral7

Sample

Backend Car Rentel/backend/models/Rental.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral8

Sample

Backend Car Rentel/backend/models/Rental.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral9

Sample

Backend Car Rentel/backend/models/User.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral10

Sample

Backend Car Rentel/backend/models/User.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral11

Sample

Backend Car Rentel/backend/node_modules/.bin/mime

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

2 signatures

150 seconds

discovery

Behavioral task

behavioral12

Sample

Backend Car Rentel/backend/node_modules/.bin/mime

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

antivm discovery

Behavioral task

behavioral13

Sample

Backend Car Rentel/backend/node_modules/.bin/mime

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral14

Sample

Backend Car Rentel/backend/node_modules/.bin/mime

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

discovery

Behavioral task

behavioral15

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

5 signatures

150 seconds

discovery execution

Behavioral task

behavioral22

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon

Resource

debian9-armhf-20260513-en

debian-9-armhf

6 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral23

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral24

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

discovery

Behavioral task

behavioral25

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Backend Car Rentel/backend/node_modules/.bin/nodetouch

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

2 signatures

150 seconds

discovery

Behavioral task

behavioral32

Sample

Backend Car Rentel/backend/node_modules/.bin/nodetouch

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

antivm discovery

Report Analysis Logs

General

Target
Backend Car Rentel/backend/node_modules/.bin/mime.cmd
Size 316B
Sample261027-jphpmsbv4v
SHA256 cd5ca2f059e780c0a4b1aa9cdd6edc7dc10413d30bf51ad537adbd428e5e7a16
MD5 2872347ac99221152281bfd56705d437
SHA1 83fa66cd05f64de1ef7f3010344a0f7babe54819
SHA512 3c0b9e12bc1ff8f2bbaa5301d8db78a5c3636dd93f5755728e5b255c4250c0ea9e3c53a545011087b9c2536b1c1676ff01f7eff3015e6e99f2e12c9f15386fe5
TLSH
T196E07D76F00070453237DB729417264226F2B748844301B6B83804FB6B413865FCE89D
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3716	cmd.exe

Processes

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Backend Car Rentel\backend\node_modules\.bin\mime.cmd"
1⤵
- Executes a command shell one-liner
PID:3716

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads