Overview
overview
3Static
static
1node-v20.1...repack
ubuntu-18.04-amd64
node-v20.1...repack
debian-9-armhf
node-v20.1...repack
debian-9-mips
node-v20.1...repack
debian-9-mipsel
node-v20.1...ck.cmd
windows10-2004-x64
3node-v20.1...ck.cmd
windows11-ltsc_2024-x64
3node-v20.1...ls.bat
windows10-2004-x64
3node-v20.1...ls.bat
windows11-ltsc_2024-x64
3node-v20.1...de.exe
windows10-2004-x64
1node-v20.1...de.exe
windows11-ltsc_2024-x64
1node-v20.1...ack.js
ubuntu-18.04-amd64
1node-v20.1...ack.js
debian-9-armhf
1node-v20.1...ack.js
debian-9-mips
1node-v20.1...ack.js
debian-9-mipsel
1node-v20.1...ack.js
windows10-2004-x64
3node-v20.1...ack.js
windows11-ltsc_2024-x64
3node-v20.1...npm.js
ubuntu-18.04-amd64
1node-v20.1...npm.js
debian-9-armhf
1node-v20.1...npm.js
debian-9-mips
1node-v20.1...npm.js
debian-9-mipsel
1node-v20.1...npx.js
ubuntu-18.04-amd64
1node-v20.1...npx.js
debian-9-armhf
1node-v20.1...npx.js
debian-9-mips
1node-v20.1...npx.js
debian-9-mipsel
1node-v20.1...npm.js
ubuntu-18.04-amd64
1node-v20.1...npm.js
debian-9-armhf
1node-v20.1...npm.js
debian-9-mips
1node-v20.1...npm.js
debian-9-mipsel
1node-v20.1...npx.js
ubuntu-18.04-amd64
1node-v20.1...npx.js
debian-9-armhf
1node-v20.1...npx.js
debian-9-mips
1node-v20.1...npx.js
debian-9-mipsel
1Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/10/2026, 18:13
Static task
static1
Behavioral task
behavioral1
Sample
node-v20.18.1-win-x64/corepack
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral2
Sample
node-v20.18.1-win-x64/corepack
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
node-v20.18.1-win-x64/corepack
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
node-v20.18.1-win-x64/corepack
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral5
Sample
node-v20.18.1-win-x64/corepack.cmd
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
node-v20.18.1-win-x64/corepack.cmd
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
node-v20.18.1-win-x64/install_tools.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
node-v20.18.1-win-x64/install_tools.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
node-v20.18.1-win-x64/node.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
node-v20.18.1-win-x64/node.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/corepack.js
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral12
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/corepack.js
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral13
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/corepack.js
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral14
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/corepack.js
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral15
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/lib/corepack.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/lib/corepack.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/npm.js
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral18
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/npm.js
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral19
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/npm.js
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral20
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/npm.js
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral21
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/npx.js
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral22
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/npx.js
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral23
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/npx.js
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral24
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/npx.js
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral25
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/pnpm.js
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral26
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/pnpm.js
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral27
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/pnpm.js
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral28
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/pnpm.js
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral29
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/pnpx.js
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral30
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/pnpx.js
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral31
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/pnpx.js
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral32
Sample
node-v20.18.1-win-x64/node_modules/corepack/dist/pnpx.js
Resource
debian9-mipsel-20260513-en
General
- Target node-v20.18.1-win-x64/install_tools.bat
- Size 3KB
- Sample261030-wt2pjafs8p
- SHA256 7f34f73126f62888c7354fea6ec4ed48679824e8972ae47f650b520055b8a975
- MD5 be9d6ff7f9f07f2d35e42a397928f165
- SHA1 8bf0944d393e76aae1d8fb370d31b99c9f093d84
- SHA512 cf64626dcdd4125a6d4d50b7b57f2c2be80a0af75ef2fbe99fa0871e4a79b472d24664c75f3234ffd59e3dfe6e8de347f956dd2f6c281369459346bcba525c50
- TLSH T1ED517525FE58C3665EE0C795BC3A52F1F70F501793128D15B0AB40348A527EFB27E299
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 2496 cmd.exe