Open-source atomic malware analysis

Analyze another

Program.cs

CSHARP
Verdict: HOSTILE
Mal-ecule
H₃(Cm₃F₂Os)
Size 7.4 KB download
First seen 80 days ago
Analyzed 55 days ago
Ecosystem windows

Objectives

component severity, 82% confident.
command-and-control/channel/http JFIF image response marker
component severity, 82% confident.
command-and-control/dropper/staging .NET StringBuilder Append use

Micro-behaviors

notable severity, 90% confident.
communications/email NNTP POST command
notable severity, 82% confident.
communications/http/client System.Net.HttpWebRequest class usage
notable severity, 80% confident.
communications/http/url URL targets .php endpoint
notable severity, 85% confident.
fs/enumerate Directory.GetFiles enumeration
notable severity, 88% confident.
fs/read Application executable self path
notable severity, 85% confident.
os/clipboard Clipboard class or symbol reference
baseline severity, 86% confident.
fs/file/write FileStream open for read
component severity, 90% confident.
data/text/keywords Destructive delete verb
component severity, 84% confident.
data/text/llm clipboard keyword (doc-context)

Metadata

baseline severity, 95% confident.
import imports System
baseline severity, 95% confident.
import/dotnet::keystroke imports Keystroke.API
baseline severity, 95% confident.
import/dotnet::system imports System.IO
baseline severity, 95% confident.
import/dotnet::system/collections imports System.Collections.Specialized
baseline severity, 95% confident.
import/dotnet::system/runtime imports System.Runtime.InteropServices
baseline severity, 95% confident.
import/dotnet::system/windows imports System.Windows.Forms
baseline severity, 95% confident.
import/dotnet::wk/libraries imports WK.Libraries.SharpClipboardNS
baseline severity, 95% confident.
import/dotnet::wk/libraries/sharpclipboardns imports WK.Libraries.SharpClipboardNS.SharpClipboard
component severity, 97% confident.
file/text Validation vocabulary string

Identity

SHA-256 2e3d0bd316fcb854e5f7d829b92ce42c3e7232e02afd0dec1fb4eacf9b0896c6
Filename Program.cs

Origin

Source harvest
Feed projects
Ecosystem windows

Timeline

First seen 7 May 2026 09:21 UTC
First analyzed 9 May 2026 12:53 UTC
Last analyzed 2 Jun 2026 00:50 UTC
Last updated 2 Jun 2026 00:50 UTC

Labeling

Label bad
Label source harvest
Traits version ed903