1b23d13454bb4a2262da821bad3ada7a7f805fb33980abecefffafb4a10663e0

Resubmissions

02/11/2026, 11:21

261102-nf56ssbv2n4

02/11/2026, 11:18

261102-nd92zabt9q3

Analysis

user interaction
yes
max time kernel
0s
max time network
129s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20261019-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
02/11/2026, 11:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ILdxp.js
Size 329KB
Sample261102-nf56ssbv2n
SHA256 1b23d13454bb4a2262da821bad3ada7a7f805fb33980abecefffafb4a10663e0
MD5 1373964f057df13177f4b34c5941f938
SHA1 2cca907cb6e829122a57f9ff05b819457a464269
SHA512 79c2ae06a06d4a461d4ae347a8a543cb88892d9219572c8a8ffe5bae898363bf77d6e25c12b1d9287d97d4361700a59eb914cccfa6df450ad6b4dc44da883e88
SSDEEP 3072:g1jCPIfzzU93r25fTsaz9HuTRHOF5rMGwHX2ItJf3r25fTsaz9HuTRHOF5rMGwHS:O5T5AAFVymIteT5AAFVymItW
TLSH
T1E77419CC9788D84B6F8C2D03BF55AAD7407292B79B997287832CFE8C05E5587C19DC89
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs 1 IoCs

Execution via JavaScript.

execution

JavaScript

T1059.007

pid	Process
1605	node

Enumerates kernel/hardware configuration 1 TTPs 2 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/memory.high	node
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/memory.max	node

Reads runtime system information 3 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/cgroup	node
File opened for reading	/proc/meminfo	node
File opened for reading	/proc/self/maps	node

/usr/bin/node
node /tmp/ILdxp.js
1⤵
- Command and Scripting Interpreter: JavaScript
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1605

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads