Open-source atomic malware analysis

Analyze another

github.com/minio/madmin-go/v3 v3.0.51

UNKNOWN
Verdict: BENIGN
SHA256: 897b6aef2bdb578262c76aa70cb2f807781c81a651886602cdb13b1431a99890
Mal-ecule
K(Li₂)O(C)H₆(Cm₈Cr₃Db₈F₅Os₄Po₂)Md₃(BkPa)
Size 270.0 KB download
First seen 8 days ago
Analyzed 8 days ago
Package pkg:golang/github.com/minio/madmin-go/[email protected]
Ecosystem go
Source proxy.golang.org

Referenced by 2 samples

Well-known

notable severity, 99% confident.
lib/crypto golang.org/x/crypto module import path
notable severity, 99% confident.
lib/platform shirou/gopsutil module import path

Objectives

notable severity, 90% confident.
command-and-control/dropper/delivery golangci-lint installer pipe

Micro-behaviors

notable severity, 94% confident.
communications/http Builds Bearer authorization header from variable
notable severity, 95% confident.
communications/http/lib Constructs a Go HTTP client
notable severity, 96% confident.
communications/http/request Calls a destructive resource method
notable severity, 90% confident.
communications/http/url Go reads an HTTP response body
notable severity, 90% confident.
communications/url Parses a URL with net/url
notable severity, 90% confident.
crypto/library RSA key generation
notable severity, 90% confident.
data Copies data with Go io.Copy
notable severity, 95% confident.
data/compress Go decodes Base64 before gzip decompression
notable severity, 90% confident.
data/control-flow Python PermissionError except handler
notable severity, 100% confident.
data/decode base64.URLEncoding.DecodeString (Go)
notable severity, 90% confident.
data/serialize Go JSON decoder construction
notable severity, 90% confident.
fs/file Delete file (os.Remove)
notable severity, 95% confident.
process/create Creates a child process with Go exec.Command
notable severity, 92% confident.
process/create/shell Workflow step pipes a download to shell

Metadata

notable severity, 98% confident.
build Go build-ignore generator or tool source
notable severity, 90% confident.
encoded-payload Encoded payload detected: base64
notable severity, 99% confident.
package Go module source archive layout

20 of 41 traits shown

Identity

SHA-256 897b6aef2bdb578262c76aa70cb2f807781c81a651886602cdb13b1431a99890
Canonical SHA-256 007eead888fb572d53df8b409b4560121d072576aa94baa0c0d888bfdd64102b
Filename [email protected]
Package github.com/minio/madmin-go/v3
Version v3.0.51
PURL pkg:golang/github.com/minio/madmin-go/[email protected]

Origin

Source x
Ecosystem go
Domain golang.org
URL https://proxy.golang.org/github.com/minio/madmin-go/v3/@v/v3.0.51.zip

Timeline

First seen 24 Aug 2026 19:22 UTC
First analyzed 24 Aug 2026 19:22 UTC
Last analyzed 24 Aug 2026 20:57 UTC
Last updated 24 Aug 2026 20:57 UTC

Labeling

Label unknown
Traits version 72034