1b23d13454bb4a2262da821bad3ada7a7f805fb33980abecefffafb4a10663e0

Resubmissions

02/11/2026, 11:21

261102-nf56ssbv2n4

02/11/2026, 11:18

261102-nd92zabt9q3

Analysis

max time kernel
13s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
02/11/2026, 11:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ILdxp.js
Size 329KB
Sample261102-nf56ssbv2n
SHA256 1b23d13454bb4a2262da821bad3ada7a7f805fb33980abecefffafb4a10663e0
MD5 1373964f057df13177f4b34c5941f938
SHA1 2cca907cb6e829122a57f9ff05b819457a464269
SHA512 79c2ae06a06d4a461d4ae347a8a543cb88892d9219572c8a8ffe5bae898363bf77d6e25c12b1d9287d97d4361700a59eb914cccfa6df450ad6b4dc44da883e88
SSDEEP 3072:g1jCPIfzzU93r25fTsaz9HuTRHOF5rMGwHX2ItJf3r25fTsaz9HuTRHOF5rMGwHS:O5T5AAFVymIteT5AAFVymItW
TLSH
T1E77419CC9788D84B6F8C2D03BF55AAD7407292B79B997287832CFE8C05E5587C19DC89
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

antivm

Malware Config

Signatures

Changes its process name 4 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	727	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	730	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	731	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	734	nodejs

Checks CPU configuration 1 TTPs 1 IoCs

Checks CPU information which indicate if the system is a virtual machine.

antivm

System Checks

T1497.001

description	ioc	Process
File opened for reading	/proc/cpuinfo	nodejs

/usr/bin/nodejs
nodejs /tmp/ILdxp.js
1⤵
- Changes its process name
- Checks CPU configuration
PID:714

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads