Open-source atomic malware analysis

Analyze another

github.com/brotherlogic/gobuildslave v0.0.0-20220921062806-57388041a2fe

UNKNOWN
Verdict: BENIGN
SHA256: 1384a17348116043f050d9592fe2e7fc88c6978d18d469c875917fc95347a0d1
Mal-ecule
K(Li)H₆(Cm₅CrDb₂FOs₄Po₅)Md(Bk)
Size 115.9 KB download
First seen 8 days ago
Analyzed 8 days ago
Package pkg:golang/github.com/brotherlogic/[email protected]
Ecosystem go
Source proxy.golang.org

Referenced by 1 sample

Well-known

notable severity, 98% confident.
lib/format Go source generated with the protobuf runtime

Micro-behaviors

notable severity, 95% confident.
communications Imports google.golang.org/grpc package
notable severity, 85% confident.
communications/http Go http.Get call
notable severity, 90% confident.
communications/http/url Cleartext http:// URL
notable severity, 90% confident.
communications/ip HTTP URL uses private 192.168 address
notable severity, 90% confident.
communications/proxy Loopback proxy endpoint with explicit port
notable severity, 95% confident.
crypto/hash Go constructs an MD5 digest
notable severity, 90% confident.
data Copies data with Go io.Copy
notable severity, 95% confident.
data/serialize Unmarshals a protobuf message in Go
notable severity, 75% confident.
fs/directory Enumerate files via ioutil.ReadDir
notable severity, 90% confident.
os/env Go clears a process environment variable
notable severity, 75% confident.
os/network Go network interface enumeration
notable severity, 95% confident.
os/sysinfo Calls Python socket.gethostname
notable severity, 95% confident.
process/create Creates a child process with Go exec.Command
notable severity, 92% confident.
process/enumerate ps process listing command
notable severity, 90% confident.
process/terminate Go process kill method
baseline severity, 80% confident.
fs/file/write Write file via ioutil.WriteFile

Metadata

notable severity, 90% confident.
build GitHub scheduled workflow trigger
baseline severity, 100% confident.
file/extension POSIX shell script extension
baseline severity, 80% confident.
file/profile Contains common English function words

20 of 25 traits shown

Identity

SHA-256 1384a17348116043f050d9592fe2e7fc88c6978d18d469c875917fc95347a0d1
Canonical SHA-256 087a7e7a2d46535ffafb31b8bfc2bfe1c7186d720c53457198e8998e4cdf6910
Filename [email protected]
Package github.com/brotherlogic/gobuildslave
Version v0.0.0-20220921062806-57388041a2fe
PURL pkg:golang/github.com/brotherlogic/[email protected]

Origin

Source x
Ecosystem go
Domain golang.org
URL https://proxy.golang.org/github.com/brotherlogic/gobuildslave/@v/v0.0.0-20220921062806-57388041a2fe.zip

Timeline

First seen 23 Aug 2026 22:17 UTC
First analyzed 23 Aug 2026 22:16 UTC
Last analyzed 23 Aug 2026 22:37 UTC
Last updated 23 Aug 2026 22:38 UTC

Labeling

Label unknown
Traits version b8c1c