Local reference
Suspicious dependency
Inferred
Mal-ecule
H(Hf)
Objectives
component severity, 86% confident.
command-and-control/remote-command
RAT screen capture command
component severity, 70% confident.
credential-access/financial
CVV/CVC field reference
Micro-behaviors
notable severity, 95% confident.
hardware/display
pyautogui.screenshot screen capture
baseline severity, 78% confident.
fs/file/write
Python write() call
Metadata
baseline severity, 100% confident.
file
Python file extension
Identity
| SHA-256 | 2c849e076f0bc6e9cc795c0c50fe6bce97b808b82c03611730f6c903408e9e88 |
|---|---|
| Filename | screenrecord.py |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 4 Jun 2026 23:16 UTC |
|---|---|
| First analyzed | 8 Jun 2026 03:47 UTC |
| Last analyzed | 8 Jun 2026 03:47 UTC |
| Last updated | 8 Jun 2026 03:47 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 8e9ac |
Not seeing what you expected? Let us know