Open-source atomic malware analysis

Analyze another

k8s.io/pod-security-admission v0.37.0-beta.0

UNKNOWN
Verdict: BENIGN
SHA256: 944ddf6451ac7cec183ed7c0756b609f889b028b8a7c163ac635ddc5f328e22a
Mal-ecule
H₅(Cm₃Db₃F₃OsPo)
Size 2.4 MB download
First seen 36 days ago
Analyzed 25 days ago
Package pkg:golang/k8s.io/[email protected]
Ecosystem golang
Source proxy.golang.org

Referenced by 2 samples

Objectives

component severity, 90% confident.
execution/automation Skill names an external destination

Micro-behaviors

notable severity, 95% confident.
communications Imports google.golang.org/grpc package
notable severity, 94% confident.
communications/http Loopback host with local LLM service port
notable severity, 90% confident.
communications/http/header Native HTTP JSON content type
notable severity, 85% confident.
data/serialize Go JSON marshal call
notable severity, 95% confident.
data/source Imports Go's unsafe package
notable severity, 80% confident.
data/source/dynamic Repeated Go reflection API usage
notable severity, 90% confident.
fs/directory Creates a directory tree with Go os.MkdirAll
notable severity, 90% confident.
fs/file Delete file (os.Remove)
notable severity, 70% confident.
fs/read filepath.Walk recursive directory traversal
notable severity, 70% confident.
process/info Go queries own executable path
baseline severity, 75% confident.
communications/ip Source references the localhost hostname
baseline severity, 80% confident.
fs/file/write Write file via ioutil.WriteFile
component severity, 90% confident.
communications/dns Go formats a dotted string
component severity, 90% confident.
communications/http/request Structured object contains a command field
component severity, 82% confident.
process/create Agent webhook channel marker

Metadata

Identity

SHA-256 944ddf6451ac7cec183ed7c0756b609f889b028b8a7c163ac635ddc5f328e22a
Canonical SHA-256 0153d06be89d1d336514ac2ee06e438d71025334fde55581b143722a2af21f86
Filename [email protected]
Package k8s.io/pod-security-admission
Version v0.37.0-beta.0
PURL pkg:golang/k8s.io/[email protected]

Origin

Source forager
Feed pkg.go.dev
Ecosystem golang
URL https://proxy.golang.org/k8s.io/pod-security-admission/@v/v0.37.0-beta.0.zip

Timeline

First seen 23 Jul 2026 15:24 UTC
First analyzed 23 Jul 2026 15:25 UTC
Last analyzed 3 Aug 2026 08:33 UTC
Last updated 27 Aug 2026 19:26 UTC

Labeling

Label unknown
Traits version b3ead