Open-source atomic malware analysis

Analyze another

github.com/brotherlogic/discovery v0.0.0-20240205075331-ec45d53694f7

UNKNOWN
Verdict: BENIGN
SHA256: 1eab93688eda86c0fa4b69742dba73ca0808499c9529e3b9a856dfa4103f3c46
AI legitimate Go discovery service
Mal-ecule
K₃(AmLiTe)H₅(Cm₆CrDb₃F₂Po₃)Md(Bk₂)
Size 321.9 KB download
First seen 7 days ago
Analyzed 7 days ago
Package pkg:golang/github.com/brotherlogic/[email protected]
Ecosystem go
Source proxy.golang.org

Referenced by 10 samples

Well-known

notable severity, 99% confident.
app/infrastructure Docker Engine source-tree path
notable severity, 98% confident.
lib/format Go protobuf runtime import
notable severity, 99% confident.
tool/development Go module cache source archive go.mod member

Micro-behaviors

notable severity, 95% confident.
communications Go process is a gRPC client
notable severity, 85% confident.
communications/http myexternalip.com service
notable severity, 90% confident.
communications/http/url Cleartext http:// URL
notable severity, 84% confident.
communications/ip Hardcoded 192.168 IPv4 with port
notable severity, 90% confident.
communications/socket Go net.Listen call
notable severity, 95% confident.
crypto/hash Go FNV-1a hash constructor
notable severity, 90% confident.
data Python writes through open handle
notable severity, 82% confident.
data/control-flow Python module-level function call
notable severity, 85% confident.
data/serialize Go JSON marshal call
notable severity, 85% confident.
fs/file Python file opened for write or append
notable severity, 80% confident.
fs/file/write Inline open().write() file creation
notable severity, 95% confident.
process/create Imports Python's subprocess module
notable severity, 80% confident.
process/create/shell cat/grep pipeline with four or more pipes
baseline severity, 88% confident.
os/service GitHub Actions GITHUB_TOKEN secret

Metadata

notable severity, 97% confident.
build Go generated-code header comment
baseline severity, 100% confident.
file/extension POSIX shell script extension
baseline severity, 80% confident.
file/profile English function-word token "and"

20 of 25 traits shown

Identity

SHA-256 1eab93688eda86c0fa4b69742dba73ca0808499c9529e3b9a856dfa4103f3c46
Canonical SHA-256 000877d1b0f3d96fa96340eacd5e83109ed2166e0698a934c1ed2bd2a5d78e51
Filename v0.0.0-20240205075331-ec45d53694f7.zip
Package github.com/brotherlogic/discovery
Version v0.0.0-20240205075331-ec45d53694f7
PURL pkg:golang/github.com/brotherlogic/[email protected]

Origin

Source upload
Ecosystem go
Domain golang.org
URL https://proxy.golang.org/github.com/brotherlogic/discovery/@v/v0.0.0-20240205075331-ec45d53694f7.zip

Timeline

First seen 23 Aug 2026 20:21 UTC
First analyzed 23 Aug 2026 20:24 UTC
Last analyzed 23 Aug 2026 22:17 UTC
Last updated 23 Aug 2026 22:17 UTC

Labeling

Label unknown
Label source upload
Traits version b8c1c