Resubmissions

02-01-2025 21:21

250102-z7fk1ayqer 9

23-12-2024 15:10

241223-skg2zssrgn 10

Analysis

  • max time kernel
    0s
  • max time network
    128s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240729-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240729-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    23-12-2024 15:10

General

  • Target

    Opensea Mint/libraries.dll

  • Size

    118KB

  • MD5

    01249bb3f9b8e4da9950f53a4e569865

  • SHA1

    7e16f5eabdd0fcaa708832ff4eb82f7bdef7206d

  • SHA256

    6396d6670598c51c5ae723f8209d850bfba736b0814e42e5432cc16bbdde0703

  • SHA512

    389128c32377af7257b5c719abc2c95132f78b95c103bb2e9e8780430d7ab94f1eab0ef84607bfec31bf9dffee4d0daa0694c6f9bfd5f4416813b784f2e63f5a

  • SSDEEP

    1536:Nt5rrjRrUw13Vsw13VVw13V2HI3SjnFf3h1OOr41r4bFJj5ftereQkeZegz:NtJPhrhn/5OKHV4reQXg4

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 5 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/Opensea Mint/libraries.dll
    "/tmp/Opensea Mint/libraries.dll"
    1⤵
      PID:1503
    • /usr/local/sbin/bash
      bash "/tmp/Opensea Mint/libraries.dll"
      1⤵
        PID:1503
      • /usr/local/bin/bash
        bash "/tmp/Opensea Mint/libraries.dll"
        1⤵
          PID:1503
        • /usr/sbin/bash
          bash "/tmp/Opensea Mint/libraries.dll"
          1⤵
            PID:1503
          • /usr/bin/bash
            bash "/tmp/Opensea Mint/libraries.dll"
            1⤵
              PID:1503
            • /sbin/bash
              bash "/tmp/Opensea Mint/libraries.dll"
              1⤵
                PID:1503
              • /bin/bash
                bash "/tmp/Opensea Mint/libraries.dll"
                1⤵
                  PID:1503
                  • /usr/bin/dirname
                    dirname "/tmp/Opensea Mint/libraries.dll"
                    2⤵
                      PID:1506
                    • /bin/sed
                      sed -E "s/.*m0*([0-9]+).pm/\\1/"
                      2⤵
                      • Reads runtime system information
                      PID:1509
                    • /bin/ls
                      ls "/tmp/Opensea Mint/test_modules/*.pm"
                      2⤵
                      • Reads runtime system information
                      PID:1508
                    • /usr/bin/tr
                      tr "\\n" " "
                      2⤵
                        PID:1514
                      • /usr/bin/sort
                        sort -u -n
                        2⤵
                          PID:1513
                        • /usr/bin/tr
                          tr " " "\\n"
                          2⤵
                            PID:1512
                          • /usr/bin/tr
                            tr "\\n" " "
                            2⤵
                              PID:1518
                            • /bin/sed
                              sed -E "s/.*module_0*([0-9]+).c/\\1/"
                              2⤵
                              • Reads runtime system information
                              PID:1517
                            • /bin/grep
                              grep -l OPTS_TYPE_SUGGEST_KG "/tmp/Opensea Mint/../src/modules/module_*.c"
                              2⤵
                                PID:1516
                              • /usr/bin/tr
                                tr "\\n" " "
                                2⤵
                                  PID:1522
                                • /bin/sed
                                  sed -E "s/.*module_0*([0-9]+).c/\\1/"
                                  2⤵
                                  • Reads runtime system information
                                  PID:1521
                                • /bin/grep
                                  grep -l OPTS_TYPE_BINARY_HASHFILE "/tmp/Opensea Mint/../src/modules/module_*.c"
                                  2⤵
                                    PID:1520
                                  • /usr/bin/tr
                                    tr "\\n" " "
                                    2⤵
                                      PID:1526
                                    • /bin/sed
                                      sed -E "s/.*module_0*([0-9]+).c/\\1/"
                                      2⤵
                                      • Reads runtime system information
                                      PID:1525
                                    • /bin/grep
                                      grep -l ATTACK_EXEC_OUTSIDE_KERNEL "/tmp/Opensea Mint/../src/modules/module_*.c"
                                      2⤵
                                        PID:1524
                                      • /bin/date
                                        date "+%s"
                                        2⤵
                                          PID:1527
                                        • /bin/uname
                                          uname
                                          2⤵
                                            PID:1528
                                          • /bin/uname
                                            uname
                                            2⤵
                                              PID:1529

                                          Network

                                          MITRE ATT&CK Matrix

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads