Local reference
Suspicious dependency
Inferred
Mal-ecule
O(C)H₂(CmPo)
Objectives
notable severity, 85% confident.
command-and-control/reverse-shell
Java captures process stdout/stderr and stdin
component severity, 82% confident.
command-and-control/beacon/network
Java octet stream upload
component severity, 90% confident.
credential-access/files
Regex component marker
component severity, 90% confident.
discovery/system/fingerprint
Java enumerates network interfaces
Micro-behaviors
notable severity, 66% confident.
communications/http/lib
HTTP requests (Java)
notable severity, 80% confident.
process/create
Java ProcessBuilder usage in source
component severity, 82% confident.
communications/http
Java octet-stream content type
component severity, 100% confident.
data/encode
toString method token
component severity, 88% confident.
data/text/llm
Codebase deletion target
component severity, 75% confident.
fs/file
Java write call reference
Metadata
baseline severity, 95% confident.
import/java::java
imports java.io
baseline severity, 95% confident.
import/java::java/nio
imports java.nio.file
baseline severity, 95% confident.
import/java::java/nio/charset
imports java.nio.charset.StandardCharsets
baseline severity, 95% confident.
import/java::java/util/stream
imports java.util.stream.Collectors
component severity, 97% confident.
file/text
Validation vocabulary string
Identity
| SHA-256 | 320e99dc7a31123c315d5472ef0e1d38e47f46b4ccf83ff2c18872f4a4a01c39 |
|---|---|
| Filename | AccountDiscovery.java |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 29 May 2026 19:51 UTC |
|---|---|
| First analyzed | 29 May 2026 20:18 UTC |
| Last analyzed | 29 May 2026 20:18 UTC |
| Last updated | 29 May 2026 20:18 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | ca5ef |
Not seeing what you expected? Let us know