Analysis
- max time kernel
4s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
- submitted
13/11/2026, 18:09
General
- Target debian/missing-sources/mocha-6.1.4/bin/mocha
- Size 3KB
- Sample261113-wrvs7set5n
- SHA256 102acde3eb4f68e7d4fd0fabc81eb2fb5cb44c0f83ab24590e7a365fe40c3ea0
Score
4/10
Malware Config
Signatures
- Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
- Reads CPU attributes 1 TTPs 1 IoCs
- Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
- Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/debian/missing-sources/mocha-6.1.4/bin/mocha/tmp/debian/missing-sources/mocha-6.1.4/bin/mocha1⤵
-
/usr/local/sbin/nodenode /tmp/debian/missing-sources/mocha-6.1.4/bin/mocha1⤵
-
/usr/local/bin/nodenode /tmp/debian/missing-sources/mocha-6.1.4/bin/mocha1⤵
-
/usr/sbin/nodenode /tmp/debian/missing-sources/mocha-6.1.4/bin/mocha1⤵
-
/usr/bin/nodenode /tmp/debian/missing-sources/mocha-6.1.4/bin/mocha1⤵
- Checks CPU configuration
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information