63910e9c7fda7f108853291a904fbfb99bb45a5c9335ab86caa45cdca2f8fe3b

Analysis

max time kernel
2s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
04/11/2026, 18:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
node_modules/.bin/jake
Size 298B
Sample261104-xjhdkstycw
SHA256 63910e9c7fda7f108853291a904fbfb99bb45a5c9335ab86caa45cdca2f8fe3b
MD5 69099b2bbbf959033d658db3ea7834f6
SHA1 5e7f6767a944d57f85f9c071e3f9d86c8aee9be9
SHA512 f254512c8d21e225d51c2ad9311a4c4623052f59f03ce4d6ad3a2668479841b5b38e469b571a4a233fb497f0570855734ed5bade1a2935b54ae39534969b2680
TLSH
T1F4E0C2B025917F76C41E43F48C219D68806A2383B8447F99FD043B829A7032D72EB77A
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs 6 IoCs

Execution via JavaScript.

execution

JavaScript

T1059.007

pid	Process
723	node
723	node
723	node
723	node
723	node
723	node

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/filesystems	sed

/tmp/node_modules/.bin/jake
/tmp/node_modules/.bin/jake
1⤵
PID:723
- /bin/sed
  sed -e "s,\\\\,/,g"
  2⤵
  - Reads runtime system information
  PID:728
- /usr/bin/dirname
  dirname /tmp/node_modules/.bin/jake
  2⤵
  PID:725
- /bin/uname
  uname
  2⤵
  PID:738

/usr/local/sbin/node
node /tmp/node_modules/.bin/../jake/bin/cli.js
1⤵
- Command and Scripting Interpreter: JavaScript
PID:723

/usr/local/bin/node
node /tmp/node_modules/.bin/../jake/bin/cli.js
1⤵
- Command and Scripting Interpreter: JavaScript
PID:723

/usr/sbin/node
node /tmp/node_modules/.bin/../jake/bin/cli.js
1⤵
- Command and Scripting Interpreter: JavaScript
PID:723

/usr/bin/node
node /tmp/node_modules/.bin/../jake/bin/cli.js
1⤵
- Command and Scripting Interpreter: JavaScript
PID:723

/sbin/node
node /tmp/node_modules/.bin/../jake/bin/cli.js
1⤵
- Command and Scripting Interpreter: JavaScript
PID:723

/bin/node
node /tmp/node_modules/.bin/../jake/bin/cli.js
1⤵
- Command and Scripting Interpreter: JavaScript
PID:723

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads