Open-source atomic malware analysis

Analyze another

github.com/brotherlogic/filecopier v0.0.0-20230107194337-8f54acb4d946

UNKNOWN
Verdict: BENIGN
SHA256: 92fcec84adbdced729fc18a1b93a4fdc330d02cc2bee476ad42b24869ec4ae84
Mal-ecule
K₃(AmLiTe)O₂(EuXe)H₃(CmF₂Po)Md(Bk₃)
Size 157.1 KB download
First seen 7 days ago
Analyzed 7 days ago
Package pkg:golang/github.com/brotherlogic/[email protected]
Ecosystem go
Source proxy.golang.org

Referenced by 4 samples

Well-known

notable severity, 99% confident.
app/infrastructure Docker Engine source-tree path
notable severity, 98% confident.
lib/format Go protobuf runtime import
notable severity, 99% confident.
tool/development Go module cache source archive go.mod member

Objectives

notable severity, 92% confident.
execution/interpreter Go command output with string tokenization
notable severity, 92% confident.
exfiltration/stealer/credential References SSH id_rsa private key path
component severity, 80% confident.
command-and-control/backdoor/rat World-writable 0777 mode literal

Micro-behaviors

notable severity, 95% confident.
communications Go registers a generated gRPC service
notable severity, 90% confident.
fs/directory Go recursively walks a directory
notable severity, 90% confident.
fs/file Delete file (os.Remove)
notable severity, 95% confident.
process/create Creates a child process with Go exec.Command
baseline severity, 80% confident.
fs/file/write Write file via ioutil.WriteFile
component severity, 80% confident.
communications/http/lib Go variable Do method call
component severity, 70% confident.
fs Contains the grep command keyword

Metadata

notable severity, 97% confident.
build Go generated-code header comment
baseline severity, 100% confident.
file/extension POSIX shell script extension
baseline severity, 80% confident.
file/profile English function-word token "this"
baseline severity, 80% confident.
package/testing/harness Go test function name
baseline severity, 70% confident.
package/testing/presence Go test file suffix
component severity, 85% confident.
lang Generated code do-not-edit warning

Identity

SHA-256 92fcec84adbdced729fc18a1b93a4fdc330d02cc2bee476ad42b24869ec4ae84
Canonical SHA-256 2aa2d661502212223672a3f68d0012df7ac59b57c7353ddb1c4d47ed967e7a63
Filename [email protected]
Package github.com/brotherlogic/filecopier
Version v0.0.0-20230107194337-8f54acb4d946
PURL pkg:golang/github.com/brotherlogic/[email protected]

Origin

Source x
Ecosystem go
Domain golang.org
URL https://proxy.golang.org/github.com/brotherlogic/filecopier/@v/v0.0.0-20230107194337-8f54acb4d946.zip

Timeline

First seen 23 Aug 2026 20:37 UTC
First analyzed 23 Aug 2026 20:24 UTC
Last analyzed 23 Aug 2026 22:16 UTC
Last updated 23 Aug 2026 22:18 UTC

Labeling

Label unknown
Traits version b8c1c