Open-source atomic malware analysis

Analyze another

onering-1.4.1.crate

CRATE
Verdict: HOSTILE
SHA256: bf1a59c082131ee826cda6c5c2a50857286f8dbb5f9851c368d1117d558ad41e · 100%
Mal-ecule
O(S₂)H₅(CmFMgOsPo)Md(Pa)
Size 27.8 KB download
First seen 6 days ago
Analyzed 6 days ago
Ecosystem rust
Source crates.io

Objectives

hostile severity, 97% confident.
supply-chain/install-hook/build Cargo build hook posts environment data
hostile severity, 100% confident.
supply-chain/recon-exfil Rust build.rs exfils source patch to Sentry
component severity, 85% confident.
command-and-control/dropper/execution Rust Command::new call

Micro-behaviors

notable severity, 82% confident.
communications/http/download Rust invokes curl or wget
notable severity, 85% confident.
fs/file/write Rust fs write call
notable severity, 100% confident.
mem/inline-asm Inline assembly macro
notable severity, 86% confident.
os/env Rust environment variable lookup
notable severity, 92% confident.
process/create Builds process via Command::new
baseline severity, 80% confident.
data/control-flow Rust infinite loop statement (loop {})
baseline severity, 80% confident.
time/sleep Rust Duration::from_secs/millis constructor
component severity, 88% confident.
data/text/keywords Codebase deletion target
component severity, 72% confident.
data/text/llm LLM instruction context

Metadata

notable severity, 88% confident.
package/fields Cargo package has quality metadata
baseline severity, 90% confident.
package/testing/harness #[cfg(test)] attribute
component severity, 92% confident.
build Archive contains Cargo build script
component severity, 100% confident.
file Document or config file extension (conf/md/txt/xml)
component severity, 97% confident.
file/text Validation vocabulary string

Objectives

hostile severity, 97% confident.
supply-chain/install-hook/build Cargo build hook posts environment data
hostile severity, 100% confident.
supply-chain/recon-exfil Rust build.rs exfils source patch to Sentry
component severity, 85% confident.
command-and-control/dropper/execution Rust Command::new call

Micro-behaviors

notable severity, 82% confident.
communications/http/download Rust invokes curl or wget
notable severity, 85% confident.
fs/file/write Rust fs write call
notable severity, 100% confident.
mem/inline-asm Inline assembly macro
notable severity, 86% confident.
os/env Rust environment variable lookup
notable severity, 92% confident.
process/create Builds process via Command::new
baseline severity, 80% confident.
data/control-flow Rust infinite loop statement (loop {})
baseline severity, 80% confident.
time/sleep Rust Duration::from_secs/millis constructor
component severity, 88% confident.
data/text/keywords Codebase deletion target
component severity, 72% confident.
data/text/llm LLM instruction context

Metadata

notable severity, 88% confident.
package/fields Cargo package has quality metadata
baseline severity, 90% confident.
package/testing/harness #[cfg(test)] attribute
component severity, 92% confident.
build Archive contains Cargo build script
component severity, 100% confident.
file Document or config file extension (conf/md/txt/xml)
component severity, 97% confident.
file/text Validation vocabulary string

Identity

SHA-256 bf1a59c082131ee826cda6c5c2a50857286f8dbb5f9851c368d1117d558ad41e
Canonical SHA-256 0d43e25b08d0a48488e44c9c936da7e368a0876435b581bfdbbfa807f26078a2
Filename onering-1.4.1.crate
Package onering
Version 1.4.1

Origin

Source harvest
Feed aikido.dev
Ecosystem rust
Domain crates.io

Timeline

First seen 10 Jun 2026 13:31 UTC
First analyzed 10 Jun 2026 15:46 UTC
Last analyzed 10 Jun 2026 15:46 UTC
Last updated 10 Jun 2026 15:46 UTC

Labeling

Label bad
Label source harvest
Traits version 055ed