Open-source atomic malware analysis

Analyze another

github.com/brotherlogic/datastore v0.0.0-20230101041740-b200a5fc54c3

UNKNOWN
Verdict: BENIGN
SHA256: 2e275b955b9d0ada4d0fb27327444f5f076ec8e2d030e99b9670d94aa68aedf3
Mal-ecule
K₂(LiTe)H₄(CmDbF₃Po₂)Md(Bk₂)
Size 145.8 KB download
First seen 7 days ago
Analyzed 7 days ago
Package pkg:golang/github.com/brotherlogic/[email protected]
Ecosystem go
Source proxy.golang.org

Referenced by 8 samples

Well-known

notable severity, 98% confident.
lib/format Go protobuf runtime import
notable severity, 99% confident.
tool/development Go module cache source archive go.mod member

Objectives

component severity, 80% confident.
command-and-control/backdoor/rat World-writable 0777 mode literal

Micro-behaviors

notable severity, 95% confident.
communications Registers a generated gRPC service
notable severity, 95% confident.
data/serialize Unmarshals a protobuf message in Go
notable severity, 90% confident.
fs/directory Creates a directory tree with Go os.MkdirAll
notable severity, 90% confident.
fs/file Recursive directory deletion
notable severity, 95% confident.
process/create Creates a child process with Go exec.Command
notable severity, 90% confident.
process/io Go writes to a client stream
baseline severity, 80% confident.
fs/file/write Write file via ioutil.WriteFile
component severity, 80% confident.
communications/http/lib Go variable Do method call
component severity, 70% confident.
fs Contains the grep command keyword

Metadata

notable severity, 97% confident.
build Go generated-code header comment
baseline severity, 100% confident.
file/extension POSIX shell script extension
baseline severity, 80% confident.
file/profile English function-word token "this"
baseline severity, 80% confident.
package/testing/harness Go test function name
baseline severity, 70% confident.
package/testing/presence Go test file suffix
component severity, 85% confident.
lang Generated code do-not-edit warning

Identity

SHA-256 2e275b955b9d0ada4d0fb27327444f5f076ec8e2d030e99b9670d94aa68aedf3
Canonical SHA-256 254b6caa1f57d168b72207a7a350bcf1e769caa5e0c2a8edf2e78daa3820fc0f
Filename [email protected]
Package github.com/brotherlogic/datastore
Version v0.0.0-20230101041740-b200a5fc54c3
PURL pkg:golang/github.com/brotherlogic/[email protected]

Origin

Source x
Ecosystem go
Domain golang.org
URL https://proxy.golang.org/github.com/brotherlogic/datastore/@v/v0.0.0-20230101041740-b200a5fc54c3.zip

Timeline

First seen 23 Aug 2026 20:34 UTC
First analyzed 23 Aug 2026 20:24 UTC
Last analyzed 23 Aug 2026 22:16 UTC
Last updated 23 Aug 2026 22:17 UTC

Labeling

Label unknown
Traits version b8c1c