Open-source atomic malware analysis

Analyze another

package/clob2.0.exe

UNKNOWN
Verdict: BENIGN
SHA256: 300a7dea05c2a588757010ad314fa55cb8ef3acebaa284f58a5cd0fd39bce478
Mal-ecule
O₂(Al₄As₂)H₈(Cm₅Cr₂DbDsF₅Os₂Po₄Ti)Md(Pa)
Size 3.8 MB download
First seen 56 days ago
Analyzed 56 days ago
Ecosystem javascript

Found in 3 archives

Objectives

suspicious severity, 92% confident.
anti-analysis/timing Multiple W^X protection cycles (RW->RX)
suspicious severity, 90% confident.
anti-static/obfuscation/eval Packed binary process execution
suspicious severity, 90% confident.
anti-static/obfuscation/string PE with heavy stack string obfuscation
notable severity, 96% confident.
anti-analysis/debugger-detect Debugger import symbol
notable severity, 85% confident.
anti-analysis/environment-detect Adaptive behavior based on environment

Micro-behaviors

notable severity, 80% confident.
communications/http/lib requests response content access
notable severity, 90% confident.
communications/ip Resolve endpoint with getaddrinfo
notable severity, 92% confident.
communications/socket Winsock client symbol lifecycle
notable severity, 92% confident.
crypto/hash FNV-1a 64-bit prime loaded via movabs (x64)
notable severity, 86% confident.
crypto/symmetric/aes Rust AES library marker
notable severity, 95% confident.
dylib/load Extended dynamic library loading (ANSI)
notable severity, 90% confident.
fs/enumerate Continue volume enumeration
notable severity, 93% confident.
fs/file Open file through native NtCreateFile
notable severity, 85% confident.
fs/sync Modify file creation/access/write times
notable severity, 85% confident.
os/clipboard Clipboard class or symbol reference
notable severity, 90% confident.
os/event/library Tokio runtime worker thread
notable severity, 95% confident.
process/create Create process (Unicode)
notable severity, 95% confident.
process/terminate Process termination via TerminateProcess
notable severity, 90% confident.
time/schedule Create extended waitable timer

Metadata

notable severity, 85% confident.
package Contains help or usage information

20 of 135 traits shown

Identity

SHA-256 300a7dea05c2a588757010ad314fa55cb8ef3acebaa284f58a5cd0fd39bce478
Filename package/clob2.0.exe

Origin

Source harvest
Feed osv.dev
Ecosystem javascript

Timeline

First seen 25 May 2026 21:11 UTC
First analyzed 25 May 2026 21:11 UTC
Last analyzed 25 May 2026 21:11 UTC
Last updated 25 May 2026 21:11 UTC

Labeling

Label bad
Label source harvest