Overview
overview
6Static
static
3Backend Ca.../db.js
windows10-2004-x64
3Backend Ca.../db.js
windows11-ltsc_2024-x64
3Backend Ca...are.js
windows10-2004-x64
3Backend Ca...are.js
windows11-ltsc_2024-x64
3Backend Ca...Car.js
windows10-2004-x64
3Backend Ca...Car.js
windows11-ltsc_2024-x64
3Backend Ca...tal.js
windows10-2004-x64
3Backend Ca...tal.js
windows11-ltsc_2024-x64
3Backend Ca...ser.js
windows10-2004-x64
3Backend Ca...ser.js
windows11-ltsc_2024-x64
3Backend Ca...n/mime
ubuntu-18.04-amd64
3Backend Ca...n/mime
debian-9-armhf
4Backend Ca...n/mime
debian-9-mips
3Backend Ca...n/mime
debian-9-mipsel
3Backend Ca...me.cmd
windows10-2004-x64
3Backend Ca...me.cmd
windows11-ltsc_2024-x64
3Backend Ca...me.ps1
ubuntu-18.04-amd64
1Backend Ca...me.ps1
debian-9-armhf
1Backend Ca...me.ps1
debian-9-mips
1Backend Ca...me.ps1
debian-9-mipsel
1Backend Ca...odemon
ubuntu-18.04-amd64
6Backend Ca...odemon
debian-9-armhf
6Backend Ca...odemon
debian-9-mips
3Backend Ca...odemon
debian-9-mipsel
3Backend Ca...on.cmd
windows10-2004-x64
3Backend Ca...on.cmd
windows11-ltsc_2024-x64
3Backend Ca...on.ps1
ubuntu-18.04-amd64
1Backend Ca...on.ps1
debian-9-armhf
1Backend Ca...on.ps1
debian-9-mips
1Backend Ca...on.ps1
debian-9-mipsel
1Backend Ca...etouch
ubuntu-18.04-amd64
3Backend Ca...etouch
debian-9-armhf
4Analysis
- max time kernel
10s - max time network
139s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20261019-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
27/10/2026, 07:50
Static task
static1
Behavioral task
behavioral1
Sample
Backend Car Rentel/backend/config/db.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Backend Car Rentel/backend/config/db.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Backend Car Rentel/backend/middleware/authMiddleware.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Backend Car Rentel/backend/middleware/authMiddleware.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Backend Car Rentel/backend/models/Car.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Backend Car Rentel/backend/models/Car.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Backend Car Rentel/backend/models/Rental.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Backend Car Rentel/backend/models/Rental.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Backend Car Rentel/backend/models/User.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Backend Car Rentel/backend/models/User.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Backend Car Rentel/backend/node_modules/.bin/mime
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
Behavioral task
behavioral12
Sample
Backend Car Rentel/backend/node_modules/.bin/mime
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral13
Sample
Backend Car Rentel/backend/node_modules/.bin/mime
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral14
Sample
Backend Car Rentel/backend/node_modules/.bin/mime
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral15
Sample
Backend Car Rentel/backend/node_modules/.bin/mime.cmd
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Backend Car Rentel/backend/node_modules/.bin/mime.cmd
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Backend Car Rentel/backend/node_modules/.bin/mime.ps1
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
Behavioral task
behavioral18
Sample
Backend Car Rentel/backend/node_modules/.bin/mime.ps1
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral19
Sample
Backend Car Rentel/backend/node_modules/.bin/mime.ps1
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral20
Sample
Backend Car Rentel/backend/node_modules/.bin/mime.ps1
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral21
Sample
Backend Car Rentel/backend/node_modules/.bin/nodemon
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
Behavioral task
behavioral22
Sample
Backend Car Rentel/backend/node_modules/.bin/nodemon
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral23
Sample
Backend Car Rentel/backend/node_modules/.bin/nodemon
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral24
Sample
Backend Car Rentel/backend/node_modules/.bin/nodemon
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral25
Sample
Backend Car Rentel/backend/node_modules/.bin/nodemon.cmd
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
Backend Car Rentel/backend/node_modules/.bin/nodemon.cmd
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
Behavioral task
behavioral28
Sample
Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1
Resource
debian9-armhf-20260513-en
debian-9-armhf
Behavioral task
behavioral29
Sample
Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1
Resource
debian9-mipsbe-20260513-en
debian-9-mips
Behavioral task
behavioral30
Sample
Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
Behavioral task
behavioral31
Sample
Backend Car Rentel/backend/node_modules/.bin/nodetouch
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
General
- Target Backend Car Rentel/backend/node_modules/.bin/nodemon
- Size 393B
- Sample261027-jphpmsbv4v
- SHA256 66a2e9a75919b51a98f0fecf4746dd603fbb7784350449408a444a87f8d63d1f
- MD5 737c12e86024f7181c4c77c36bf1b8e0
- SHA1 2806524bcb9e516417a2758dcf1f26b0b5d047fd
- SHA512 08045b0c9f32de5dd2b15e48c933e1a510642fba2560b995b4a5ec98abd275b30ad6368eee0e7497620060796fdec724c210d4a501ee9136581cadc744b1470a
- TLSH T1E5E0D87525E15FBB960942F88D065858416B034378443F5AFD0C3B435BA031DB2E773D
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates running processes
Discovers information about currently running processes on the system
- Reads CPU attributes 1 TTPs 1 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/online ps - Command and Scripting Interpreter: Unix Shell 1 TTPs 1 IoCs
Execute scripts via Unix Shell.
pid Process 1533 sh - Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/cgroup/memory/memory.limit_in_bytes node -
description ioc Process File opened for reading /proc/1295/stat ps File opened for reading /proc/7/status ps File opened for reading /proc/35/status ps File opened for reading /proc/521/stat ps File opened for reading /proc/669/status ps File opened for reading /proc/sys/kernel/pid_max ps File opened for reading /proc/9/status ps File opened for reading /proc/25/stat ps File opened for reading /proc/157/stat ps File opened for reading /proc/445/status ps File opened for reading /proc/994/stat ps File opened for reading /proc/1067/stat ps File opened for reading /proc/filesystems sed File opened for reading /proc/5/stat ps File opened for reading /proc/1061/status ps File opened for reading /proc/1513/status ps File opened for reading /proc/3/stat ps File opened for reading /proc/89/status ps File opened for reading /proc/238/stat ps File opened for reading /proc/706/status ps File opened for reading /proc/958/stat ps File opened for reading /proc/1061/stat ps File opened for reading /proc/6/status ps File opened for reading /proc/36/stat ps File opened for reading /proc/166/stat ps File opened for reading /proc/560/stat ps File opened for reading /proc/1023/stat ps File opened for reading /proc/1048/status ps File opened for reading /proc/1533/stat ps File opened for reading /proc/98/status ps File opened for reading /proc/173/status ps File opened for reading /proc/1149/stat ps File opened for reading /proc/1506/stat ps File opened for reading /proc/1534/stat ps File opened for reading /proc/708/status ps File opened for reading /proc/18/status ps File opened for reading /proc/29/stat ps File opened for reading /proc/447/status ps File opened for reading /proc/599/status ps File opened for reading /proc/962/stat ps File opened for reading /proc/985/stat ps File opened for reading /proc/1318/status ps File opened for reading /proc/25/status ps File opened for reading /proc/79/stat ps File opened for reading /proc/167/stat ps File opened for reading /proc/168/stat ps File opened for reading /proc/1318/stat ps File opened for reading /proc/1373/status ps File opened for reading /proc/1529/stat ps File opened for reading /proc/11/stat ps File opened for reading /proc/19/stat ps File opened for reading /proc/20/status ps File opened for reading /proc/28/stat ps File opened for reading /proc/200/status ps File opened for reading /proc/666/stat ps File opened for reading /proc/156/status ps File opened for reading /proc/158/status ps File opened for reading /proc/200/stat ps File opened for reading /proc/474/status ps File opened for reading /proc/981/status ps File opened for reading /proc/1067/status ps File opened for reading /proc/1072/stat ps File opened for reading /proc/1079/stat ps File opened for reading /proc/10/stat ps
Processes
-
/tmp/Backend Car Rentel/backend/node_modules/.bin/nodemon"/tmp/Backend Car Rentel/backend/node_modules/.bin/nodemon"1⤵PID:1517
-
/bin/sedsed -e "s,\\\\,/,g"2⤵
- Reads runtime system information
PID:1521
-
-
/usr/bin/dirnamedirname "/tmp/Backend Car Rentel/backend/node_modules/.bin/nodemon"2⤵PID:1518
-
-
/bin/unameuname2⤵PID:1522
-
-
/usr/local/sbin/nodenode "/tmp/Backend Car Rentel/backend/node_modules/.bin/../nodemon/bin/nodemon.js"1⤵PID:1517
-
/usr/local/bin/nodenode "/tmp/Backend Car Rentel/backend/node_modules/.bin/../nodemon/bin/nodemon.js"1⤵PID:1517
-
/usr/sbin/nodenode "/tmp/Backend Car Rentel/backend/node_modules/.bin/../nodemon/bin/nodemon.js"1⤵PID:1517
-
/usr/bin/nodenode "/tmp/Backend Car Rentel/backend/node_modules/.bin/../nodemon/bin/nodemon.js"1⤵
- Enumerates kernel/hardware configuration
PID:1517 -
/bin/sh/bin/sh -c ps2⤵
- Command and Scripting Interpreter: Unix Shell
PID:1533 -
/bin/psps3⤵
- Reads CPU attributes
- Reads runtime system information
PID:1534
-
-