81b32c2dfd7f921e96468ad05d5c6805161070120e7574e4d2ab6ec7a85d794a

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
10/11/2026, 14:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/tests/require
Size 54B
Sample261110-rlgbeayv7k
SHA256 81b32c2dfd7f921e96468ad05d5c6805161070120e7574e4d2ab6ec7a85d794a
MD5 2750eee29d8763001fc95167cb7ca74c
SHA1 5d8bfa6ab28a6a40cc4b500cbe06babbd3b7ef9a
SHA512 c1720b4af447265f19b8ba1e111237d8c9df06d54f8ed4819bdc4dfa849a6d2e0495289340307006ace99a6b3b97e099ffdb9338625b8ab998350e3bf900e01a
TLSH
T1D490025451A29434166B545112046674A792C4969640811EE0015A8796512913A02938
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/fs/cgroup/memory/memory.limit_in_bytes	nodejs

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/meminfo	nodejs

/tmp/debian/tests/require
/tmp/debian/tests/require
1⤵
PID:1510
- /usr/bin/nodejs
  nodejs -e "require('array-differ');"
  2⤵
  - Enumerates kernel/hardware configuration
  - Reads runtime system information
  PID:1511

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads