Overview

overview

4

Static

static

3

dayflow-hr...nTR.js

windows10-2004-x64

3

dayflow-hr...nTR.js

windows11-ltsc_2024-x64

3

dayflow-hr...on.svg

windows10-2004-x64

3

dayflow-hr...on.svg

windows11-ltsc_2024-x64

4

dayflow-hr...x.html

windows10-2004-x64

3

dayflow-hr...x.html

windows11-ltsc_2024-x64

3

dayflow-hr...x.html

windows10-2004-x64

3

dayflow-hr...x.html

windows11-ltsc_2024-x64

3

dayflow-hr...apping

ubuntu-18.04-amd64

3

dayflow-hr...apping

debian-9-armhf

3

dayflow-hr...apping

debian-9-mips

3

dayflow-hr...apping

debian-9-mipsel

3

dayflow-hr...ng.cmd

windows10-2004-x64

3

dayflow-hr...ng.cmd

windows11-ltsc_2024-x64

3

dayflow-hr...ng.ps1

ubuntu-18.04-amd64

1

dayflow-hr...ng.ps1

debian-9-armhf

1

dayflow-hr...ng.ps1

debian-9-mips

1

dayflow-hr...ng.ps1

debian-9-mipsel

1

dayflow-hr...rslist

ubuntu-18.04-amd64

3

dayflow-hr...rslist

debian-9-armhf

3

dayflow-hr...rslist

debian-9-mips

3

dayflow-hr...rslist

debian-9-mipsel

3

dayflow-hr...st.cmd

windows10-2004-x64

3

dayflow-hr...st.cmd

windows11-ltsc_2024-x64

3

dayflow-hr...st.ps1

ubuntu-18.04-amd64

1

dayflow-hr...st.ps1

debian-9-armhf

1

dayflow-hr...st.ps1

debian-9-mips

1

dayflow-hr...st.ps1

debian-9-mipsel

dayflow-hr...sbuild

ubuntu-18.04-amd64

3

dayflow-hr...sbuild

debian-9-armhf

3

dayflow-hr...sbuild

debian-9-mips

3

dayflow-hr...sbuild

debian-9-mipsel

1

Analysis

  • max time kernel
    0s
  • max time network
    130s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20261019-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    02/11/2026, 01:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    dayflow-hrms/client/node_modules/.bin/esbuild
  • Size 816B
  • Sample261102-b9pdxset6w
  • SHA256 a68f48af05fe83fe687a76d26cfd697876caa2ae30035e963d8f28ab1b6dfe8a
  • MD5 SHA1 SHA512 TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/dayflow-hrms/client/node_modules/.bin/esbuild
    /tmp/dayflow-hrms/client/node_modules/.bin/esbuild
    1⤵
      PID:1513
      • /bin/sed
        sed -e "s,\\\\,/,g"
        2⤵
        • Reads runtime system information
        PID:1517
      • /usr/bin/dirname
        dirname /tmp/dayflow-hrms/client/node_modules/.bin/esbuild
        2⤵
          PID:1514
        • /bin/uname
          uname -a
          2⤵
            PID:1518
        • /usr/local/sbin/node.exe
          node.exe /tmp/dayflow-hrms/client/node_modules/.bin/../esbuild/bin/esbuild
          1⤵
            PID:1513
          • /usr/local/bin/node.exe
            node.exe /tmp/dayflow-hrms/client/node_modules/.bin/../esbuild/bin/esbuild
            1⤵
              PID:1513
            • /usr/sbin/node.exe
              node.exe /tmp/dayflow-hrms/client/node_modules/.bin/../esbuild/bin/esbuild
              1⤵
                PID:1513
              • /usr/bin/node.exe
                node.exe /tmp/dayflow-hrms/client/node_modules/.bin/../esbuild/bin/esbuild
                1⤵
                  PID:1513
                • /sbin/node.exe
                  node.exe /tmp/dayflow-hrms/client/node_modules/.bin/../esbuild/bin/esbuild
                  1⤵
                    PID:1513
                  • /bin/node.exe
                    node.exe /tmp/dayflow-hrms/client/node_modules/.bin/../esbuild/bin/esbuild
                    1⤵
                      PID:1513
                    • /snap/bin/node.exe
                      node.exe /tmp/dayflow-hrms/client/node_modules/.bin/../esbuild/bin/esbuild
                      1⤵
                        PID:1513

                      Network

                            MITRE ATT&CK Matrix

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads