478931b408ebd48d635c0f90d9e7e6929cc5de9d490008523dd0489f441e0cf1

Analysis

max time kernel
13s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
13/11/2026, 04:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/tests/require
Size 49B
Sample261113-e1jzmazx2n
SHA256 478931b408ebd48d635c0f90d9e7e6929cc5de9d490008523dd0489f441e0cf1
MD5 16e7b3fcacb7b16f3b0184a77da472ff
SHA1 ae710a5abcaf38fbb3dbba5bdf13c2aaf26c7f4c
SHA512 07c7d86e3b431216d8edcdba637fceaa5f607a53870741e4a37e44d6b2eee51eadb96517855a63e541c0f66c77f97e09e922bf5fe6b48a809f5e7e953fb6348e
MD5 SHA1 SHA512

Score

4^/10

antivm

Malware Config

Signatures

Changes its process name 4 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	718	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	720	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	724	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	727	nodejs

Checks CPU configuration 1 TTPs 1 IoCs

Checks CPU information which indicate if the system is a virtual machine.

antivm

System Checks

T1497.001

description	ioc	Process
File opened for reading	/proc/cpuinfo	nodejs

/tmp/debian/tests/require
/tmp/debian/tests/require
1⤵
PID:704
- /usr/bin/nodejs
  nodejs -e "require('through');"
  2⤵
  - Changes its process name
  - Checks CPU configuration
  PID:707

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads