c30b89425b3ebc7d664d7d9356cadfa985c4e38feaf6a69a0ae22e530313d3d9

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20261019-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20261019-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
13/11/2026, 16:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/tests/require
Size 60B
Sample261113-tmp12sdt9z
SHA256 c30b89425b3ebc7d664d7d9356cadfa985c4e38feaf6a69a0ae22e530313d3d9
MD5 3d2ec456c2632694f6b298132966c379
SHA1 08eaa9e2e0221af980d4fd6d1be7ad69ee25b896
SHA512 82683892a943a75f7ae37c1e8957f6eb4ad905efb724a3daa8ba6266676087c44b3e848798c93b36131c70813f6762677493102989be795a6219b1d9f9cd08a4
TLSH
T1D9A00280839E682436A7215250057222D552C9405760E12ED050A58A86812967A8557D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/fs/cgroup/memory/memory.limit_in_bytes	node

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/meminfo	node

/tmp/debian/tests/require
/tmp/debian/tests/require
1⤵
PID:1521
- /usr/bin/node
  node -e "require('process-nextick-args');"
  2⤵
  - Enumerates kernel/hardware configuration
  - Reads runtime system information
  PID:1522

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads