81b32c2dfd7f921e96468ad05d5c6805161070120e7574e4d2ab6ec7a85d794a

Analysis

max time kernel
12s
platform
debian-9_mips
resource
debian9-mipsbe-20260513-en
resource tags

arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
10/11/2026, 14:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/tests/require
Size 54B
Sample261110-rlgbeayv7k
SHA256 81b32c2dfd7f921e96468ad05d5c6805161070120e7574e4d2ab6ec7a85d794a
MD5 2750eee29d8763001fc95167cb7ca74c
SHA1 5d8bfa6ab28a6a40cc4b500cbe06babbd3b7ef9a
SHA512 c1720b4af447265f19b8ba1e111237d8c9df06d54f8ed4819bdc4dfa849a6d2e0495289340307006ace99a6b3b97e099ffdb9338625b8ab998350e3bf900e01a
TLSH
T1D490025451A29434166B545112046674A792C4969640811EE0015A8796512913A02938
MD5 SHA1 SHA512 TLSH

Score

4^/10

antivm

Malware Config

Signatures

Changes its process name 4 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	714	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	716	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	720	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	723	nodejs

Checks CPU configuration 1 TTPs 1 IoCs

Checks CPU information which indicate if the system is a virtual machine.

antivm

System Checks

T1497.001

description	ioc	Process
File opened for reading	/proc/cpuinfo	nodejs

/tmp/debian/tests/require
/tmp/debian/tests/require
1⤵
PID:700
- /usr/bin/nodejs
  nodejs -e "require('array-differ');"
  2⤵
  - Changes its process name
  - Checks CPU configuration
  PID:702

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads