Open-source atomic malware analysis

Analyze another

main.rs

RUST
Verdict: HOSTILE
SHA256: 6f0d9a5d56b1b8d37959d846085e1d0acd7218e3d777c5820d613754ff7291d1 · 100%
Mal-ecule
O(P)H₂(F₂Po)
Size 10.5 KB download
First seen 92 days ago
Analyzed 87 days ago

Objectives

notable severity, 90% confident.
persistence/system/service Systemd service file with persistence directives
component severity, 90% confident.
command-and-control/dropper/delivery hidden file under /tmp
component severity, 90% confident.
credential-access/files Regex component marker
component severity, 88% confident.
supply-chain/install-hook build.rs captures command output
component severity, 70% confident.
supply-chain/trojanized/library exfiltrat word fragment

Micro-behaviors

notable severity, 88% confident.
fs/file Rust read file to string
notable severity, 85% confident.
fs/file/write Rust fs write call
notable severity, 92% confident.
process/create Builds process via Command::new
baseline severity, 80% confident.
time/sleep Rust std::thread::sleep delay call
component severity, 86% confident.
data/text/keywords Permission-grant action verb keyword

Metadata

baseline severity, 95% confident.
import imports std
component severity, 97% confident.
file/text Validation vocabulary string

Identity

SHA-256 6f0d9a5d56b1b8d37959d846085e1d0acd7218e3d777c5820d613754ff7291d1
Filename main.rs

Origin

Source harvest

Timeline

First seen 29 May 2026 19:51 UTC
First analyzed 29 May 2026 20:06 UTC
Last analyzed 4 Jun 2026 03:23 UTC
Last updated 4 Jun 2026 03:23 UTC

Labeling

Label bad
Label source harvest
Traits version 84adb