Open-source atomic malware analysis

Analyze another

github.com/brotherlogic/githubcard v0.0.0-20230217215917-e6782e02de2a

UNKNOWN
Verdict: BENIGN
SHA256: 9a1005964b5e6b979f82a23a131a37013e688425f766e8df4b65e9b6da0af562
Mal-ecule
K₂(LiTe)H₄(Cm₁₁CrDbF)Md(Bk₂)
Size 215.4 KB download
First seen 7 days ago
Analyzed 7 days ago
Package pkg:golang/github.com/brotherlogic/[email protected]
Ecosystem go
Source proxy.golang.org

Referenced by 2 samples

Well-known

notable severity, 98% confident.
lib/format Go source generated with the protobuf runtime
notable severity, 99% confident.
tool/development Go module cache source archive go.mod member

Objectives

component severity, 85% confident.
exfiltration/stealer/credential curl posts a request body

Micro-behaviors

notable severity, 95% confident.
communications Imports google.golang.org/grpc package
notable severity, 90% confident.
communications/http Go HTTP POST request construction
notable severity, 92% confident.
communications/http/download Curl fetches GitHub release metadata
notable severity, 90% confident.
communications/http/header References HTTP Content-Type application/json
notable severity, 95% confident.
communications/http/lib Constructs a Go HTTP client
notable severity, 85% confident.
communications/http/request curl HTTP client call
notable severity, 95% confident.
crypto/hash Go FNV-1a hash constructor
notable severity, 85% confident.
data/serialize Go JSON unmarshal call
notable severity, 80% confident.
fs/directory Shell invokes mkdir command
component severity, 70% confident.
fs Contains the grep command keyword

Metadata

notable severity, 97% confident.
build Go generated-code header comment
baseline severity, 85% confident.
file Source has multiple lines over 1000 characters
baseline severity, 100% confident.
file/extension POSIX shell script extension
baseline severity, 80% confident.
file/profile English function-word token "that"
baseline severity, 80% confident.
package/testing/harness Go test function name
baseline severity, 70% confident.
package/testing/presence Go test file suffix
component severity, 85% confident.
lang Generated source warning text

Identity

SHA-256 9a1005964b5e6b979f82a23a131a37013e688425f766e8df4b65e9b6da0af562
Canonical SHA-256 018c9affe67f8fec7e851b8d1cfdd1b940fa90b20359b7498fdfd62422527edf
Filename [email protected]
Package github.com/brotherlogic/githubcard
Version v0.0.0-20230217215917-e6782e02de2a
PURL pkg:golang/github.com/brotherlogic/[email protected]

Origin

Source x
Ecosystem go
Domain golang.org
URL https://proxy.golang.org/github.com/brotherlogic/githubcard/@v/v0.0.0-20230217215917-e6782e02de2a.zip

Timeline

First seen 23 Aug 2026 21:35 UTC
First analyzed 23 Aug 2026 21:35 UTC
Last analyzed 23 Aug 2026 22:08 UTC
Last updated 23 Aug 2026 22:10 UTC

Labeling

Label unknown
Traits version b8c1c