atomdrift labBETA

Open-source atomic malware analysis

Analyze another

A0HVDHQ8Z-workbot

UNKNOWN

BENIGN

f6b2efe407324589771b37045bdd142e4448608d2f37c5be7822b632dc5ed453

Mal-ecule

O(C)H₃(Cm₅Db₂U₂)Md

Size 115.6 KB download unavailable

First seen 5 days ago

Analyzed 5 days ago

Package https://slack.com/marketplace/A0HVDHQ8Z-workbot

Source slack.com

Referenced by 1 sample

benign 11179690159.js fetched 8de761d6ed0f analyzed 4 days ago

A0HVDHQ8Z-workbot javascript

75	window.TSBeacon = function (label, value) {
76	var endpoint_url = window.ts_endpoint_url \|\| 'https://slack.com/beacon/timing';
77	navigator.sendBeacon(	Browser sendBeacon telemetry
78	endpoint_url + '?data=' + encodeURIComponent(label + ':' + value),	Encodes a value into a query parameter
79	'',
80	);

83	window.TSBeacon = function (label, value) {
84	var endpoint_url = window.ts_endpoint_url \|\| 'https://slack.com/beacon/timing';
85	new Image().src = endpoint_url + '?data=' + encodeURIComponent(label + ':' + value);	Sends HTTP request through image source
86	};
87	}
88	})();
89	</script><script>window.TSMark('step_load');</script><noscript><meta http-equiv="refresh" content="0; URL=/marketplace/A0HVDHQ8Z-workbot?nojsmode=1"></noscript><script type="text/javascript">var safe_hosts = ["app.optimizely.com","tinyspeck.dev.slack.com","houston-dev.tinyspeck.com","houston.tinyspeck.com"];

91	if (self !== top && safe_hosts.indexOf(top.location.host) === -1) {
92	window.document.write(
93	'\u003Cstyle>body * {display:none !important;}\u003C/style>\u003Ca href="#" onclick=' +
94	'"top.location.href=window.location.href" style="display:block !important;padding:10px">Go to Slack.com\u003C/a>'
95	);
96	}

108	pageEl.parentNode.removeChild(pageEl);
109	clientEl.parentNode.removeChild(clientEl);
110	for (var i = 0; i < sectionEls.length; i++) {
111	sectionEls[i].parentNode.removeChild(sectionEls[i]);
112	}
113	window.TS = null;
114	window.TD = null;
115	window.clearInterval(timer);

194	for(var g=0; g < gtmTags.length; g++){
195	var elem = gtmTags[g];
196	elem.addEventListener('click', gtmClickHandler);	Registers browser click event listener
197	}
198	});
199	</script><script type="text/javascript">
200	(function(e,c,b,f,d,g,a){e.SlackBeaconObject=d;
201	e[d]=e[d]\|\|function(){(e[d].q=e[d].q\|\|[]).push([1*new Date(),arguments])};
202	e[d].l=1*new Date();g=c.createElement(b);a=c.getElementsByTagName(b)[0];
203	g.async=1;g.src=f;a.parentNode.insertBefore(g,a)
204	})(window,document,"script","https://a.slack-edge.com/bv1-13/slack_beacon.1de5853dee52ce81.min.js","sb");
205	window.sb('set', 'token', '3307f436963e02d4f9eb85ce5159744c');
206	window.sb('track', 'pageview');
207	</script><script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" data-document-language="true" data-domain-script="3bcd90cf-1e32-46d7-adbd-634f66b65b7d"></script><script>window.OneTrustLoaded = true;</script><script>
208	window.dataLayer = window.dataLayer \|\| [];

Objectives

Micro-behaviors

75	window.TSBeacon = function (label, value) {
76	var endpoint_url = window.ts_endpoint_url \|\| 'https://slack.com/beacon/timing';
77	navigator.sendBeacon(
78	endpoint_url + '?data=' + encodeURIComponent(label + ':' + value),
79	'',
80	);

182	document.addEventListener("DOMContentLoaded", function(e) {
183	var gtmDataLayer = window.dataLayer \|\| [];
184	var gtmTags = document.querySelectorAll('*[data-gtm-click]');
185	var gtmClickHandler = function(c) {
186	var gtm_events = this.getAttribute('data-gtm-click');
187	if (!gtm_events) return;
188	var gtm_events_arr = gtm_events.split(",");
189	for(var e=0; e < gtm_events_arr.length; e++) {
190	var ev = gtm_events_arr[e].trim();
191	gtmDataLayer.push({ 'event': ev });
192	}

133	GA.boot_data.geo = {"ip":"136.47.200.217","country":"US","is_in_european_union":false,"region":"NC","city":"Chapel Hill","zip":"27514","lat":35.9153,"lon":-79.0386,"metro":560,"country_label":"United States","region_label":"North Carolina","country3":"USA","continent":"NA","isp":"Google Fiber"};
134	GA.boot_data.geocode = "en-us";
135	GA.boot_data.intl_prefix = "";

91	if (self !== top && safe_hosts.indexOf(top.location.host) === -1) {
92	window.document.write(
93	'\u003Cstyle>body * {display:none !important;}\u003C/style>\u003Ca href="#" onclick=' +
94	'"top.location.href=window.location.href" style="display:block !important;padding:10px">Go to Slack.com\u003C/a>'
95	);
96	}

75	window.TSBeacon = function (label, value) {
76	var endpoint_url = window.ts_endpoint_url \|\| 'https://slack.com/beacon/timing';
77	navigator.sendBeacon(
78	endpoint_url + '?data=' + encodeURIComponent(label + ':' + value),
79	'',
80	);

91	if (self !== top && safe_hosts.indexOf(top.location.host) === -1) {
92	window.document.write(
93	'\u003Cstyle>body * {display:none !important;}\u003C/style>\u003Ca href="#" onclick=' +
94	'"top.location.href=window.location.href" style="display:block !important;padding:10px">Go to Slack.com\u003C/a>'
95	);
96	}

194	for(var g=0; g < gtmTags.length; g++){
195	var elem = gtmTags[g];
196	elem.addEventListener('click', gtmClickHandler);
197	}
198	});
199	</script><script type="text/javascript">
200	(function(e,c,b,f,d,g,a){e.SlackBeaconObject=d;
201	e[d]=e[d]\|\|function(){(e[d].q=e[d].q\|\|[]).push([1*new Date(),arguments])};
202	e[d].l=1*new Date();g=c.createElement(b);a=c.getElementsByTagName(b)[0];
203	g.async=1;g.src=f;a.parentNode.insertBefore(g,a)
204	})(window,document,"script","https://a.slack-edge.com/bv1-13/slack_beacon.1de5853dee52ce81.min.js","sb");
205	window.sb('set', 'token', '3307f436963e02d4f9eb85ce5159744c');
206	window.sb('track', 'pageview');
207	</script><script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" data-document-language="true" data-domain-script="3bcd90cf-1e32-46d7-adbd-634f66b65b7d"></script><script>window.OneTrustLoaded = true;</script><script>
208	window.dataLayer = window.dataLayer \|\| [];

108	pageEl.parentNode.removeChild(pageEl);
109	clientEl.parentNode.removeChild(clientEl);
110	for (var i = 0; i < sectionEls.length; i++) {
111	sectionEls[i].parentNode.removeChild(sectionEls[i]);
112	}
113	window.TS = null;
114	window.TD = null;
115	window.clearInterval(timer);

352	return false;
353	}
354	};</script><title>Workbot & Slack Integration \| Slack Marketplace</title><meta name="author" content="Slack"><meta name="description" content="Workbot is a bot platform by Workato that you can use to configure your workflows, ChatOps, and send custom, actionable notifications - without having to write a single line of code!

358	Apps include"><meta property="og:url" content="https://slack.com/marketplace/A0HVDHQ8Z-workbot"><link id="favicon" rel="shortcut icon" href="https://a.slack-edge.com/e6a93c1/img/icons/favicon-32.png" sizes="16x16 32x32 48x48" type="image/png"></head><body class="p-app_directory_app_detaildeprecated"><script> var w = Math.max(document.documentElement.clientWidth, window.innerWidth \|\| 0); if (w > 1440) document.querySelector('body').classList.add('widescreen');</script><input type="hidden" data-app="1" data-is-installed="false" data-is-slack-integration="false" data-is-directory-published="false" data-is-distributed="false"><input id="is_signed_in" type="hidden" value="false"><input id="user_can_manage_apps" type="hidden" value="false"><div id="apps-page-app-element"><div id="page_and_nav"><div data-automount-component="NavBarWithContext" data-automount-props="{"isGovSlack":false,"teamPicker":null,"appCollectionsNavData":[{"slug":"workflow-automation","ti
359	/**
360	* A placeholder function that the build script uses to

Metadata

378	};
379	</script><script type="text/javascript"> // common boot_data
380	var boot_data = {"api_url":"\/api\/","app":"web","user_id":null,"team_id":"T00000000","visitor_uid":"fbc31e820a56e3515672814f23b64fc0","no_login":true,"version_ts":1785061323,"version_uid":"1aac92c95521efe149c4b4ddee4524193d5c1cf3","cache_version":"v21-nomad","cache_ts_version":"v2-bunny","redir_domain":"slack-redir.net","cdn":{"edges":["https:\/\/a.slack-edge.com\/","https:\/\/b.slack-edge.com\/","https:\/\/a.slack-edge.com\/"],"avatars":"https:\/\/ca.slack-edge.com\/","downloads":"https:\/\/downloads.slack-edge.com\/","files":"https:\/\/slack-files.com\/"},"signin_url":"https:\/\/slack.com\/signin","abs_root_url":"https:\/\/slack.com\/","team_url":"","image_proxy_url":"https:\/\/slack-imgs.com\/","beacon_timing_url":"https:\/\/slack.com\/beacon\/timing","beacon_error_url":"https:\/\/slack.com\/beacon\/error","clog_url":"clog\/track\/","api_token":null,"vvv_paths":{"codemirror":"https:\/\/a.slack-edge.com\/bv1-13\/codemirror.min.966e49586f8ac847.min.js","codemirror_addon_simple":"https:\/\/a.slack-edge.com\
381	boot_data.start_ms = Date.now();
382	</script><script type="text/javascript" crossorigin="anonymous" src="https://a.slack-edge.com/bv1-13/rollup-core_required_libs.74a908cd0c361a51.min.js" onload="window._cdn ? _cdn.ok(this, arguments) : null" onerror="window._cdn ? _cdn.failed(this, arguments) : null"></script><script type="text/javascript" crossorigin="anonymous" src="https://a.slack-edge.com/bv1-13/modern.vendor.a3fefd6f0b449407.min.js" onload="window._cdn ? _cdn.ok(this, arguments) : null" onerror="window._cdn ? _cdn.failed(this, arguments) : null"></script><script type="text/javascript" crossorigin="anonymous" src="https://a.slack-edge.com/bv1-13/application.94ce9fa9de1eb615.min.js" onload="window._cdn ? _cdn.ok(this, arguments) : null" onerror="window._cdn ? _cdn.failed(this, arguments) : null"></script><script type="text/javascript" crossorigin="anonymous" src="https://a.slack-edge.com/bv1-13/app-directory.e0ed929c3f496196.min.js" onload="window._cdn ? _cdn.ok(this, arguments) : null" onerror="window._cdn ? _cdn.failed(this, arguments) :
383	boot_data.app_id = "A0HVDHQ8Z";
384	boot_data.app_name = "Workbot";

Identity

SHA-256	f6b2efe407324589771b37045bdd142e4448608d2f37c5be7822b632dc5ed453
Filename	A0HVDHQ8Z-workbot
PURL	https://slack.com/marketplace/A0HVDHQ8Z-workbot

Origin

Source	upload
URL	https://slack.com/marketplace/A0HVDHQ8Z-workbot

Timeline

First seen	26 Jul 2026 08:43 UTC
First analyzed	26 Jul 2026 08:45 UTC
Last analyzed	26 Jul 2026 08:47 UTC
Last updated	26 Jul 2026 08:45 UTC

Labeling

Label	unknown
Label source	upload
Traits version	9266e

Not seeing what you expected? Let us know