f1ec3edd4020fee994a393d9ad5bb86f006abfe8edc37794302f109a9781c879

Analysis

max time kernel
14s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
13/11/2026, 17:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/tests/require
Size 53B
Sample261113-vtedkayv9j
SHA256 f1ec3edd4020fee994a393d9ad5bb86f006abfe8edc37794302f109a9781c879
MD5 447175ce653819afb47acd0a2689dee4
SHA1 a10d1b9764a648272beb90c944f9f70cada37660
SHA512 0a9d83da35e5335690a8ad39dd0b62cb1a0377e1210e38f0da80d8a98ca26bb86ee698801b031dd3dc9642b19db30c6f9e0795c1bd47ef190bea49b98060315f
TLSH
T11690028401D294241596459515445620F2A3E4819640D01EE04194C6C6916917A42929
MD5 SHA1 SHA512 TLSH

Score

4^/10

antivm

Malware Config

Signatures

Changes its process name 4 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	718	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	721	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	724	nodejs
Changes the process name, possibly in an attempt to hide itself	V8 WorkerThread	727	nodejs

Checks CPU configuration 1 TTPs 1 IoCs

Checks CPU information which indicate if the system is a virtual machine.

antivm

System Checks

T1497.001

description	ioc	Process
File opened for reading	/proc/cpuinfo	nodejs

/tmp/debian/tests/require
/tmp/debian/tests/require
1⤵
PID:704
- /usr/bin/nodejs
  nodejs -e "require('object-copy');"
  2⤵
  - Changes its process name
  - Checks CPU configuration
  PID:706

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads