Open-source atomic malware analysis

Analyze another

github.com/brotherlogic/githubcard v0.0.0-20240213021646-eb033c672608

UNKNOWN
Verdict: BENIGN
SHA256: ea62408a64e03bbec4296a419b0771413f86f966796b7a1aa7c832b2ea267ae8
Mal-ecule
K₂(LiTe)H₄(Cm₁₂CrDbF)Md(Bk₂)
Size 342.7 KB download
First seen 7 days ago
Analyzed 7 days ago
Package pkg:golang/github.com/brotherlogic/[email protected]
Ecosystem go
Source proxy.golang.org

Referenced by 1 sample

Well-known

notable severity, 98% confident.
lib/format Go protobuf runtime import
notable severity, 99% confident.
tool/development Go module cache source archive go.mod member
baseline severity, 92% confident.
tool/detection Secret-scanner rule named for a credential kind

Micro-behaviors

notable severity, 95% confident.
communications Imports google.golang.org/grpc package
notable severity, 90% confident.
communications/http curl sends request body with -d
notable severity, 92% confident.
communications/http/download Curl fetches GitHub release metadata
notable severity, 90% confident.
communications/http/header References HTTP Content-Type application/json
notable severity, 95% confident.
communications/http/lib Constructs a Go HTTP client
notable severity, 85% confident.
communications/http/request curl HTTP client call
notable severity, 78% confident.
communications/http/server Go HTTP router dependency in go.mod
notable severity, 95% confident.
crypto/hash Go FNV-1a hash constructor
notable severity, 85% confident.
data/serialize Go JSON unmarshal call
notable severity, 80% confident.
fs/directory Shell invokes mkdir command
baseline severity, 88% confident.
os/service GitHub Actions GITHUB_TOKEN secret

Metadata

notable severity, 97% confident.
build Go generated-code header comment
baseline severity, 85% confident.
file Source has multiple lines over 1000 characters
baseline severity, 100% confident.
file/extension POSIX shell script extension
baseline severity, 80% confident.
file/profile English function-word token "that"
baseline severity, 80% confident.
package/testing/harness Go test function name
baseline severity, 70% confident.
package/testing/presence Go test file suffix

20 of 23 traits shown

Identity

SHA-256 ea62408a64e03bbec4296a419b0771413f86f966796b7a1aa7c832b2ea267ae8
Canonical SHA-256 0397afb0e62fc06a27391e6b063835829364faad2e7ad0fc6391cfadbf3c22e0
Filename v0.0.0-20240213021646-eb033c672608.zip
Package github.com/brotherlogic/githubcard
Version v0.0.0-20240213021646-eb033c672608
PURL pkg:golang/github.com/brotherlogic/[email protected]

Origin

Source upload
Ecosystem go
Domain golang.org
URL https://proxy.golang.org/github.com/brotherlogic/githubcard/@v/v0.0.0-20240213021646-eb033c672608.zip

Timeline

First seen 23 Aug 2026 20:21 UTC
First analyzed 23 Aug 2026 20:23 UTC
Last analyzed 23 Aug 2026 21:12 UTC
Last updated 23 Aug 2026 21:14 UTC

Labeling

Label unknown
Label source upload
Traits version b8c1c