Benign go Download

github.com/gesellix/Bose-SoundTouch v0.115.0

Legitimate open-source IoT control software

Anomalous package hides outbound data exfiltrationAnomalous package runs an obfuscated install hook
SHA-2566779f06709c3fb73931c438afb0488c19d3da6a9b81362a1abf7ac3740dc4895
URLhttps://proxy.golang.org/github.com/gesellix/!bose-!sound!touch/@v/v0.115.0.zip
MaleculeO₁₃(S₃AlAsC₆CaDy₄Er₃EuI₂LaP₃Pr₃Xe₂)H₇(Cm₂₆Cr₄Db₇F₁₂Os₁₅Po₁₁U₃)Md₃(Bk₂Pa)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.