Open-source atomic malware analysis

Analyze another

firefox 136.0.3-1.fc42

RPM
Verdict: BENIGN
SHA256: b60b20581deb79f46da48fcd156558c79a77e5a08cfa980fb7c65d849ffcc84f
Mal-ecule
O₇(CaErP₂AsCPrS)H₄(Os₂Po₄Db₂F)Md(Pa)
Size 75.1 MB download
First seen 107 days ago
Analyzed 107 days ago
Package pkg:rpm/fedora/[email protected]
Ecosystem fedora
Source dl.fedoraproject.org

Objectives

notable severity, 75% confident.
evasion/anti-av/platform getenforce command
notable severity, 84% confident.
persistence bash shell init persistence
component severity, 90% confident.
anti-static/obfuscation JavaScript function keyword in non-code file
component severity, 95% confident.
command-and-control/dropper/delivery uname architecture variable
component severity, 82% confident.
persistence/system/init Launch helper used with /root binary
component severity, 90% confident.
privilege-escalation/elevation-control Executes discovered su binary
component severity, 100% confident.
supply-chain/install-hook/dropper /run path

Micro-behaviors

notable severity, 80% confident.
os/env/vars uname command for fingerprinting
notable severity, 80% confident.
process/create Invokes cp
baseline severity, 80% confident.
fs/link Read symbolic link target path
component severity, 95% confident.
data/archive RAR member repeats parent traversal
component severity, 100% confident.
data/text "Environment" keyword
component severity, 90% confident.
fs/delete Android synchronous write mode
component severity, 100% confident.
process Redirects output to /dev/null

Metadata

baseline severity, 80% confident.
binary High density of shell commands
baseline severity, 100% confident.
lang shell code embedded in string
component severity, 90% confident.
package File has 30 or more lines

Identity

SHA-256 b60b20581deb79f46da48fcd156558c79a77e5a08cfa980fb7c65d849ffcc84f
Filename firefox-136.0.3-1.fc42.aarch64.rpm
Package firefox
Version 136.0.3-1.fc42
PURL pkg:rpm/fedora/[email protected]

Origin

Source harvest
Feed fedoraproject.org
Ecosystem fedora
Domain fedoraproject.org
URL https://dl.fedoraproject.org/pub/fedora/linux/releases/42/Everything/aarch64/os/Packages/f/firefox-136.0.3-1.fc42.aarch64.rpm

Timeline

First seen 30 Apr 2026 15:38 UTC
Last analyzed 30 Apr 2026 15:45 UTC
Last updated 30 Apr 2026 15:45 UTC

Labeling

Label good
Label source harvest
Traits version f6cf3