Open-source atomic malware analysis

Analyze another

github.com v0.0.0-20260610065802-735aeef54fc2

ZIP
Verdict: BENIGN
SHA256: 7a3272c2ba631532ceebe87655176e1531823deff56e23f85e853d7b45afbbf1
Mal-ecule
H₂(F₂Po)
Size 7.3 KB download unavailable
First seen 51 days ago
Analyzed 51 days ago
Ecosystem go
Source googleusercontent.com

Objectives

component severity, 85% confident.
command-and-control/dropper/execution Go exec.Command call
component severity, 75% confident.
persistence/login File write word

Micro-behaviors

notable severity, 90% confident.
fs/file Read file contents via os.ReadFile
notable severity, 80% confident.
fs/file/write Write file via os.WriteFile
notable severity, 95% confident.
process/create Go exec.Command call
component severity, 88% confident.
data/text/keywords Source or test deletion target
component severity, 72% confident.
data/text/llm LLM instruction context

Metadata

baseline severity, 95% confident.
package Zip archive path
component severity, 100% confident.
file Document or config file extension (conf/md/txt/xml)
component severity, 97% confident.
file/text Validation vocabulary string

Identity

SHA-256 7a3272c2ba631532ceebe87655176e1531823deff56e23f85e853d7b45afbbf1
Canonical SHA-256 1eb85fc97224598dad1852b5d6483bbcf0aa8608790dcc657a5a2a761ae9c8c6
Filename github.com-PingCAP-QE-ci-tools-gomod-sync-v0.0.0-20260610065802-735aeef54fc2.zip
Package github.com
Version v0.0.0-20260610065802-735aeef54fc2

Origin

Source harvest
Feed pkg.go.dev
Ecosystem go
Domain googleusercontent.com

Timeline

First seen 10 Jun 2026 14:02 UTC
First analyzed 10 Jun 2026 14:15 UTC
Last analyzed 10 Jun 2026 14:15 UTC
Last updated 18 Jun 2026 16:59 UTC

Labeling

Label unknown
Label source harvest
Traits version 055ed