Overview
overview
4Static
static
1debian/control.js
windows10-2004-x64
3debian/control.js
windows11-ltsc_2024-x64
3debian/rules
ubuntu-18.04-amd64
1debian/rules
debian-9-armhf
1debian/rules
debian-9-mips
1debian/rules
debian-9-mipsel
1debian/tests/require
ubuntu-18.04-amd64
3debian/tests/require
debian-9-armhf
4debian/tests/require
debian-9-mips
4debian/tests/require
debian-9-mipsel
4Analysis
- max time kernel
11s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
10/11/2026, 12:14
Static task
static1
Behavioral task
behavioral1
Sample
debian/control.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
debian/control.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
debian/rules
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral4
Sample
debian/rules
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral5
Sample
debian/rules
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral6
Sample
debian/rules
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral7
Sample
debian/tests/require
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral8
Sample
debian/tests/require
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral9
Sample
debian/tests/require
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral10
Sample
debian/tests/require
Resource
debian9-mipsel-20260513-en
General
- Target debian/tests/require
- Size 53B
- Sample261110-pene2afb95
- SHA256 f6fb3005f3738f43dbdd57f499b70a7a8d584cbe55077bd29af75ace4ed7dc2a
- MD5 110d6ca897d122170c6f2669a229c6d5
- SHA1 75f0b5a65cfcfb87929d71aa86fc407aa3f34bff
- SHA512 ee28991a2c63775b81f2c81bab61a8e4f9a81b5a97c7f479b11020a661780db7e6e5dfaa573978b2aa109b07b3f9699a416e1e93d060e5126d49686c25c8cde2
- TLSH T1EE90024456D26034255B5061130852609753C5929684912FD0021A86C681295360293C
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Changes its process name 4 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 718 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 720 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 722 nodejs Changes the process name, possibly in an attempt to hide itself V8 WorkerThread 724 nodejs - Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo nodejs