f6fb3005f3738f43dbdd57f499b70a7a8d584cbe55077bd29af75ace4ed7dc2a

Analysis

max time kernel
14s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
10/11/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/tests/require
Size 53B
Sample261110-pene2afb95
SHA256 f6fb3005f3738f43dbdd57f499b70a7a8d584cbe55077bd29af75ace4ed7dc2a
MD5 110d6ca897d122170c6f2669a229c6d5
SHA1 75f0b5a65cfcfb87929d71aa86fc407aa3f34bff
SHA512 ee28991a2c63775b81f2c81bab61a8e4f9a81b5a97c7f479b11020a661780db7e6e5dfaa573978b2aa109b07b3f9699a416e1e93d060e5126d49686c25c8cde2
TLSH
T1EE90024456D26034255B5061130852609753C5929684912FD0021A86C681295360293C
MD5 SHA1 SHA512 TLSH

Score

4^/10

antivm

Malware Config

Signatures

Changes its process name 4 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	730	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	732	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	734	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	738	nodejs

Checks CPU configuration 1 TTPs 1 IoCs

Checks CPU information which indicate if the system is a virtual machine.

antivm

System Checks

T1497.001

description	ioc	Process
File opened for reading	/proc/cpuinfo	nodejs

/tmp/debian/tests/require
/tmp/debian/tests/require
1⤵
PID:716
- /usr/bin/nodejs
  nodejs -e "require('array-equal');"
  2⤵
  - Changes its process name
  - Checks CPU configuration
  PID:718

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads