Open-source atomic malware analysis

Analyze another

github.com-prometheus-operator-prometheus-operator-v0.91.1-0.20260615045750-5926289568c0.zip

ZIP
Verdict: BENIGN
SHA256: 3fd79490f91886745a4633ab38fae86a30010207501a2ffe269f6c8ddbab6ee4
Mal-ecule
O(Ca)H₆(Cm₈CrDb₆F₅Os₃Po)Md(Bk₂)
Size 4.4 MB download
First seen 4 days ago
Analyzed 4 days ago
Ecosystem go
Source proxy.golang.org

Objectives

suspicious severity, 94% confident.
credential-access/vpn Go PAN-OS OpenVPN client key

Micro-behaviors

notable severity, 85% confident.
communications/dns/lookup net.LookupHost DNS lookup
notable severity, 90% confident.
communications/http HTTP request targets loopback address (local IPC)
notable severity, 90% confident.
communications/http/lib Creates a new HTTP request
notable severity, 70% confident.
communications/http/server Go http.Server type
notable severity, 90% confident.
communications/socket Go net.Listen call
notable severity, 88% confident.
crypto/asymmetric X25519 key exchange marker
notable severity, 90% confident.
data/archive Go zip.NewWriter usage
notable severity, 85% confident.
data/compress Go gzip.NewWriter compression
notable severity, 100% confident.
data/decode base64.StdEncoding.Decode (Go)
notable severity, 85% confident.
data/serialize Go JSON unmarshal call
notable severity, 80% confident.
data/source/dynamic Repeated Go reflection API usage
notable severity, 80% confident.
data/text Polish language detection
notable severity, 90% confident.
fs/directory Create directory tree via os.MkdirAll
notable severity, 90% confident.
fs/file Copy data via io.Copy
notable severity, 80% confident.
fs/file/write Write file via os.WriteFile
notable severity, 85% confident.
os/container Kubernetes API access
notable severity, 80% confident.
os/env os.Getenv() environment variable
notable severity, 95% confident.
process/create Go exec.Command call

Metadata

notable severity, 92% confident.
build actions/checkout workflow step

20 of 25 traits shown

Identity

SHA-256 3fd79490f91886745a4633ab38fae86a30010207501a2ffe269f6c8ddbab6ee4
Canonical SHA-256 010cfdc6d6fb3a09005918d3ab14f07dcb1d76e85fd67e4fa0811028aecd9c56
Filename github.com-prometheus-operator-prometheus-operator-v0.91.1-0.20260615045750-5926289568c0.zip
Package github.com/prometheus-operator/prometheus-operator
Version v0.91.1-0.20260615045750-5926289568c0

Origin

Source forager
Feed pkg.go.dev
Ecosystem go
Domain golang.org
URL https://proxy.golang.org/github.com/prometheus-operator/prometheus-operator/@v/v0.91.1-0.20260615045750-5926289568c0.zip

Timeline

First seen 15 Jun 2026 02:43 UTC
First analyzed 15 Jun 2026 02:45 UTC
Last analyzed 15 Jun 2026 02:45 UTC
Last updated 15 Jun 2026 02:45 UTC

Labeling

Label unknown
Label source forager
Traits version 061e3