Open-source atomic malware analysis

Analyze another

zdiff.in

SHELL
Verdict: BENIGN
Mal-ecule
O₃(S₂AsP)H(Po₄)Md(Pa)
Size 6.3 KB download
First seen 118 days ago
Analyzed 112 days ago
Ecosystem freebsd-ports

Objectives

notable severity, 75% confident.
supply-chain/install-hook Test fixture decompressed with gzip/gunzip and executed
component severity, 82% confident.
persistence/system/init Launch helper used with /root binary
component severity, 100% confident.
supply-chain/install-hook/dropper Shell rm -f command

Micro-behaviors

notable severity, 80% confident.
process/create Eval of shell variable content
baseline severity, 70% confident.
fs/path Unix /tmp/ path reference
baseline severity, 90% confident.
os/msdos DOS dispatcher check op
component severity, 100% confident.
process Redirects output to /dev/null

Metadata

baseline severity, 80% confident.
binary High density of shell commands
component severity, 90% confident.
package File has 30 or more lines

Identity

SHA-256 5d3995da3345db953079c57da3700a75a71afd0ed49f47884d342be2fc20e351
Filename zdiff.in

Origin

Source harvest
Ecosystem freebsd-ports

Timeline

First seen 24 Apr 2026 16:15 UTC
Last analyzed 30 Apr 2026 04:17 UTC
Last updated 30 Apr 2026 04:17 UTC

Labeling

Label good
Label source harvest
Traits version f6eaa