5a40f65b262c0f3b413baa61138b475f1c468b6af00e85adeca85e510fc4df95

Login
Reports

Overview

overview

Static

static

Backend Ca.../db.js

windows10-2004-x64

Backend Ca.../db.js

windows11-ltsc_2024-x64

Backend Ca...are.js

windows10-2004-x64

Backend Ca...are.js

windows11-ltsc_2024-x64

Backend Ca...Car.js

windows10-2004-x64

Backend Ca...Car.js

windows11-ltsc_2024-x64

Backend Ca...tal.js

windows10-2004-x64

Backend Ca...tal.js

windows11-ltsc_2024-x64

Backend Ca...ser.js

windows10-2004-x64

Backend Ca...ser.js

windows11-ltsc_2024-x64

Backend Ca...n/mime

ubuntu-18.04-amd64

Backend Ca...n/mime

debian-9-armhf

Backend Ca...n/mime

debian-9-mips

Backend Ca...n/mime

debian-9-mipsel

Backend Ca...me.cmd

windows10-2004-x64

Backend Ca...me.cmd

windows11-ltsc_2024-x64

Backend Ca...me.ps1

ubuntu-18.04-amd64

Backend Ca...me.ps1

debian-9-armhf

Backend Ca...me.ps1

debian-9-mips

Backend Ca...me.ps1

debian-9-mipsel

Backend Ca...odemon

ubuntu-18.04-amd64

Backend Ca...odemon

debian-9-armhf

Backend Ca...odemon

debian-9-mips

Backend Ca...odemon

debian-9-mipsel

Backend Ca...on.cmd

windows10-2004-x64

Backend Ca...on.cmd

windows11-ltsc_2024-x64

Backend Ca...on.ps1

ubuntu-18.04-amd64

Backend Ca...on.ps1

debian-9-armhf

Backend Ca...on.ps1

debian-9-mips

Backend Ca...on.ps1

debian-9-mipsel

Backend Ca...etouch

ubuntu-18.04-amd64

Backend Ca...etouch

debian-9-armhf

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 07:50

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Backend Car Rentel/backend/config/db.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral2

Sample

Backend Car Rentel/backend/config/db.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral3

Sample

Backend Car Rentel/backend/middleware/authMiddleware.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral4

Sample

Backend Car Rentel/backend/middleware/authMiddleware.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral5

Sample

Backend Car Rentel/backend/models/Car.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral6

Sample

Backend Car Rentel/backend/models/Car.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral7

Sample

Backend Car Rentel/backend/models/Rental.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral8

Sample

Backend Car Rentel/backend/models/Rental.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral9

Sample

Backend Car Rentel/backend/models/User.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral10

Sample

Backend Car Rentel/backend/models/User.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral11

Sample

Backend Car Rentel/backend/node_modules/.bin/mime

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

2 signatures

150 seconds

discovery

Behavioral task

behavioral12

Sample

Backend Car Rentel/backend/node_modules/.bin/mime

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

antivm discovery

Behavioral task

behavioral13

Sample

Backend Car Rentel/backend/node_modules/.bin/mime

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral14

Sample

Backend Car Rentel/backend/node_modules/.bin/mime

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

discovery

Behavioral task

behavioral15

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Backend Car Rentel/backend/node_modules/.bin/mime.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

5 signatures

150 seconds

discovery execution

Behavioral task

behavioral22

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon

Resource

debian9-armhf-20260513-en

debian-9-armhf

6 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral23

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral24

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

discovery

Behavioral task

behavioral25

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.cmd

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.cmd

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Backend Car Rentel/backend/node_modules/.bin/nodemon.ps1

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Backend Car Rentel/backend/node_modules/.bin/nodetouch

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

2 signatures

150 seconds

discovery

Behavioral task

behavioral32

Sample

Backend Car Rentel/backend/node_modules/.bin/nodetouch

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

antivm discovery

Report Analysis Logs

General

Target
Backend Car Rentel/backend/middleware/authMiddleware.js
Size 661B
Sample261027-jphpmsbv4v
SHA256 5a40f65b262c0f3b413baa61138b475f1c468b6af00e85adeca85e510fc4df95
MD5 fa15ebf7c71ff969a64431e48aa23e69
SHA1 38dd0c3ae3dfffa22579cb5790b4a064b9d47a90
SHA512 eeaf9ced9ad523a11f6e5aec2a2ada6772d3b01af05ea3c8816a4679af7291c52c760e183e33a153210d1f2ba6ccc9a5c5bb584bea119380be289985da85de92
TLSH
T1A401239021F71A15415BACDDC70AD037F155D40A504C8C617BFCD6E12FC30B90793A95
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Backend Car Rentel\backend\middleware\authMiddleware.js"
1⤵
PID:3456

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads