Open-source atomic malware analysis

Analyze another

states.py

PYTHON
Verdict: BENIGN
SHA256: 1e0cff8ea1124f63ae17e570df198ca43ee3b89ec13d1a4e67bcb1d12364a933
Mal-ecule
O₃(As₃PS)H₂(DbOs)Md₂(Pa)
Size 125.8 KB download
First seen 110 days ago
Analyzed 105 days ago
Ecosystem pypi

Objectives

baseline severity, 80% confident.
anti-static/obfuscation/code-metrics High ratio of embedded code in strings
component severity, 85% confident.
anti-static/obfuscation Hex-encoded string pattern
component severity, 100% confident.
anti-static/obfuscation/payload compile keyword
component severity, 100% confident.
supply-chain Derived raw condition for docutils

Micro-behaviors

baseline severity, 100% confident.
data/control-flow Python infinite while True loop
baseline severity, 100% confident.
process/create shell script command substitution
component severity, 82% confident.
data/text LLM secret data target
component severity, 100% confident.
os/container poststart hook

Metadata

notable severity, 90% confident.
encoded-payload Encoded payload detected: xor
baseline severity, 95% confident.
import imports re
baseline severity, 95% confident.
import/python::docutils imports docutils.nodes
baseline severity, 95% confident.
import/python::docutils/parsers imports docutils.parsers.rst
baseline severity, 95% confident.
import/python::docutils/parsers/rst imports docutils.parsers.rst.languages
baseline severity, 95% confident.
import/python::docutils/utils imports docutils.utils.roman as roman
component severity, 90% confident.
package File has 30 or more lines

Identity

SHA-256 1e0cff8ea1124f63ae17e570df198ca43ee3b89ec13d1a4e67bcb1d12364a933
Filename states.py

Origin

Source harvest
Ecosystem pypi

Timeline

First seen 24 Apr 2026 16:11 UTC
Last analyzed 29 Apr 2026 21:35 UTC
Last updated 29 Apr 2026 21:35 UTC

Labeling

Label good
Label source harvest
Traits version d1941