Open-source atomic malware analysis

Analyze another

Dockerfile.kubebuilder_4.1.0-benign

DOCKERFILE
Verdict: SUSPICIOUS
AI Installs untrusted APK
Mal-ecule
O(C)H(F)
Size 691 B download
First seen 51 days ago
Analyzed 51 days ago
Dockerfile installs staged untrusted APK: Dockerfile.kubebuilder_4.1.0-benign:0x51
Dockerfile infection check: Dockerfile.kubebuilder_4.1.0-benign:0x14e
Dockerfile stages local APK package: Dockerfile.kubebuilder_4.1.0-benign:0x51
Dockerfile.kubebuilder_4.1.0-benign dockerfile
4 # Copy your APK to the container
5 COPY packages/x86_64/kubebuilder-4.1.0-r0.apk /tmp/ Dockerfile untrusted APK
7 # Install dependencies if needed (replace with actual dependencies)
11 RUN apk add --allow-untrusted /tmp/kubebuilder-4.1.0-r0.apk
13 # Create some dummy shell script in /root for GhostDog to infect Dockerfile infection check
14 RUN echo -e '#!/bin/sh\necho "Script 1"' > /root/script1.sh && \
15 chmod +x /root/script1.sh chmod +x (make executable)
17 # Set the command to run kubebuilder with a simple version smoketest
18 # Then check if the dummy script was infected (it shouldn't be for benign tests)
19 CMD ["sh", "-c", "kubebuilder version && /root/script1.sh"]

Objectives

Micro-behaviors

Identity

SHA-256 4e17cd2689290911aed400353fb138ad75a23c1fe9ecccce2c55b910992c554b
Filename Dockerfile.kubebuilder_4.1.0-benign

Origin

Source harvest

Timeline

First seen 27 Jun 2026 14:03 UTC
First analyzed 27 Jun 2026 18:56 UTC
Last analyzed 27 Jun 2026 18:56 UTC
Last updated 27 Jun 2026 18:56 UTC

Labeling

Label bad
Label source harvest
Traits version 46112