Resubmissions

02-01-2025 21:21

250102-z7fk1ayqer 9

23-12-2024 15:10

241223-skg2zssrgn 10

Analysis

  • max time kernel
    1s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240729-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240729-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    23-12-2024 15:10

General

  • Target

    Opensea Mint/libraries.dll

  • Size

    118KB

  • MD5

    01249bb3f9b8e4da9950f53a4e569865

  • SHA1

    7e16f5eabdd0fcaa708832ff4eb82f7bdef7206d

  • SHA256

    6396d6670598c51c5ae723f8209d850bfba736b0814e42e5432cc16bbdde0703

  • SHA512

    389128c32377af7257b5c719abc2c95132f78b95c103bb2e9e8780430d7ab94f1eab0ef84607bfec31bf9dffee4d0daa0694c6f9bfd5f4416813b784f2e63f5a

  • SSDEEP

    1536:Nt5rrjRrUw13Vsw13VVw13V2HI3SjnFf3h1OOr41r4bFJj5ftereQkeZegz:NtJPhrhn/5OKHV4reQXg4

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 5 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/Opensea Mint/libraries.dll
    "/tmp/Opensea Mint/libraries.dll"
    1⤵
      PID:715
    • /usr/local/sbin/bash
      bash "/tmp/Opensea Mint/libraries.dll"
      1⤵
        PID:715
      • /usr/local/bin/bash
        bash "/tmp/Opensea Mint/libraries.dll"
        1⤵
          PID:715
        • /usr/sbin/bash
          bash "/tmp/Opensea Mint/libraries.dll"
          1⤵
            PID:715
          • /usr/bin/bash
            bash "/tmp/Opensea Mint/libraries.dll"
            1⤵
              PID:715
            • /sbin/bash
              bash "/tmp/Opensea Mint/libraries.dll"
              1⤵
                PID:715
              • /bin/bash
                bash "/tmp/Opensea Mint/libraries.dll"
                1⤵
                  PID:715
                  • /usr/bin/dirname
                    dirname "/tmp/Opensea Mint/libraries.dll"
                    2⤵
                      PID:727
                    • /bin/sed
                      sed -E "s/.*m0*([0-9]+).pm/\\1/"
                      2⤵
                      • Reads runtime system information
                      PID:732
                    • /bin/ls
                      ls "/tmp/Opensea Mint/test_modules/*.pm"
                      2⤵
                      • Reads runtime system information
                      PID:730
                    • /usr/bin/sort
                      sort -u -n
                      2⤵
                        PID:738
                      • /usr/bin/tr
                        tr " " "\\n"
                        2⤵
                          PID:737
                        • /usr/bin/tr
                          tr "\\n" " "
                          2⤵
                            PID:739
                          • /bin/sed
                            sed -E "s/.*module_0*([0-9]+).c/\\1/"
                            2⤵
                            • Reads runtime system information
                            PID:744
                          • /usr/bin/tr
                            tr "\\n" " "
                            2⤵
                              PID:745
                            • /bin/grep
                              grep -l OPTS_TYPE_SUGGEST_KG "/tmp/Opensea Mint/../src/modules/module_*.c"
                              2⤵
                                PID:743
                              • /bin/sed
                                sed -E "s/.*module_0*([0-9]+).c/\\1/"
                                2⤵
                                • Reads runtime system information
                                PID:749
                              • /usr/bin/tr
                                tr "\\n" " "
                                2⤵
                                  PID:750
                                • /bin/grep
                                  grep -l OPTS_TYPE_BINARY_HASHFILE "/tmp/Opensea Mint/../src/modules/module_*.c"
                                  2⤵
                                    PID:748
                                  • /bin/sed
                                    sed -E "s/.*module_0*([0-9]+).c/\\1/"
                                    2⤵
                                    • Reads runtime system information
                                    PID:753
                                  • /usr/bin/tr
                                    tr "\\n" " "
                                    2⤵
                                      PID:754
                                    • /bin/grep
                                      grep -l ATTACK_EXEC_OUTSIDE_KERNEL "/tmp/Opensea Mint/../src/modules/module_*.c"
                                      2⤵
                                        PID:752
                                      • /bin/date
                                        date "+%s"
                                        2⤵
                                          PID:756
                                        • /bin/uname
                                          uname
                                          2⤵
                                            PID:759
                                          • /bin/uname
                                            uname
                                            2⤵
                                              PID:762

                                          Network

                                          MITRE ATT&CK Matrix

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads