901a7575fdc6c56b0e3186c62db54b19817ed66e5e184fe88c2b22f5e1fd83a4

Analysis

max time kernel
11s
platform
debian-9_mips
resource
debian9-mipsbe-20260513-en
resource tags

arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
13/11/2026, 06:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/tests/require
Size 53B
Sample261113-hjwtmsgx6s
SHA256 901a7575fdc6c56b0e3186c62db54b19817ed66e5e184fe88c2b22f5e1fd83a4
MD5 638ad9588c796383d2534816b8052852
SHA1 c570c18c332127c25e24fb3030a1dbcaf0a3c8bf
SHA512 43fe2f1b76cb476b3e73eb6948a018473b87a58610f534c687f38885f0866b212d8504a227db2b55c96e2be845a8ac6674886bfd1b57fc591358ea87c7266942
TLSH
T19990024001E354711757805522085320A292C4819670D07FD0905486D5412E27A46928
MD5 SHA1 SHA512 TLSH

Score

4^/10

antivm

Malware Config

Signatures

Changes its process name 4 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	735	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	737	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	739	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	742	nodejs

Checks CPU configuration 1 TTPs 1 IoCs

Checks CPU information which indicate if the system is a virtual machine.

antivm

System Checks

T1497.001

description	ioc	Process
File opened for reading	/proc/cpuinfo	nodejs

/tmp/debian/tests/require
/tmp/debian/tests/require
1⤵
PID:719
- /usr/bin/nodejs
  nodejs -e "require('class-utils');"
  2⤵
  - Changes its process name
  - Checks CPU configuration
  PID:721

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads