Rule Info
Name
SUSP_Go_LibP2P_Library_Aug26
Author
Florian Roth
Description
Detects Go binaries using the libp2p library - a peer-to-peer networking library seen being used in implants and C2 frameworks
Score
60
Reference
Date
2026-08-24
Modified
2026-08-25
Minimum Yara
3.5.0
Rule Hash
7789ddedbae008829782f64c538ab9d1
Tags
['FILE', 'SUSP', 'EXE']
Required Modules
[]
Virustotal Matches
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
6
Suspicious (< 10 engines)
8
Clean (0 engines)
28
Rule Matches
Timestamp
Positives
Total
Hash
VT
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR