Open-source atomic malware analysis

Analyze another

github.com/opencontainers/runtime-spec v1.1.0-rc.2

ZIP
Verdict: BENIGN
Mal-ecule
H₃(CmFPo)Md(Pa)
Size 108.0 KB download
First seen 5 days ago
Analyzed 3 days ago
Ecosystem go

Objectives

component severity, 92% confident.
anti-static/obfuscation/code-metrics Regex component marker
component severity, 90% confident.
command-and-control/reverse-shell any interactive shell exec
component severity, 92% confident.
execution/automation Skill decodes staged content
component severity, 97% confident.
supply-chain/recon-exfil Account database path marker

Micro-behaviors

notable severity, 94% confident.
communications/url/construction URL query embeds an <> placeholder
notable severity, 90% confident.
fs/file Go tests missing path with os.Stat
notable severity, 80% confident.
process/create/shell shell execution with -c flag
baseline severity, 85% confident.
fs/directory Traverses directories using common APIs
baseline severity, 80% confident.
process/exit Script returns a process status
component severity, 90% confident.
communications/dns Go formats a dotted string
component severity, 90% confident.
data/serialize JSON object type field fragment
component severity, 100% confident.
os/container poststop hook

Metadata

notable severity, 96% confident.
package/testing/presence Package test directory member
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 100% confident.
lang shell code embedded in string
baseline severity, 90% confident.
package Markdown shell code-fence marker
component severity, 90% confident.
file File has 30 or more lines
component severity, 100% confident.
file/extension Text, document, or config extension

20 of 30 traits shown

Identity

SHA-256 a3c7c5d212e34674ec4bb95332abff669fd6d9e81f9b7585c05c6530831832e0
Filename v1.1.0-rc.2.zip
Package github.com/opencontainers/runtime-spec
Version v1.1.0-rc.2
PURL pkg:golang/github.com/opencontainers/[email protected]

Timeline

First seen 10 Aug 2026 12:03 UTC
First analyzed 10 Aug 2026 12:15 UTC
Last analyzed 13 Aug 2026 00:07 UTC
Last updated 13 Aug 2026 00:07 UTC

Labeling

Label unknown
Label source upload
Traits version 73866