Benign Download

10/37/10370136a385a921a3b855fe7cf9e34eba171ed09c520ef9cb4641922505c3b4

Hidden path prefix in /tmpComposite catalog requires rule references
SHA-25610370136a385a921a3b855fe7cf9e34eba171ed09c520ef9cb4641922505c3b4
MaleculeH(F)Md

Evidence

Top-level traits or composite_rules key lines 1–30
1defaults:
2 platforms: [openbsd, bsd, unix]
3 for: [go, elf]
4 attack: T1546.004
5
6traits:
7 - id: go-hidden-agent-path
8 desc: Go hidden agent path
9 crit: suspicious
10 conf: 0.92
11 if:
12 type: text
13 substr: /tmp/.agent_96ab3
14
15 - id: go-shrc-persistence
⋯15 lines

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.