Open-source atomic malware analysis

Analyze another

variantfold 0.9.0

WHL
Verdict: BENIGN
SHA256: 31e73991abf2faed97c9c3be4745a7b8db2b3fa47aa0caa1d14a2d04a2d92253
Mal-ecule
O(C)H(F)
Size 24.6 KB download
First seen 69 days ago
Analyzed 66 days ago
Ecosystem python
Source files.pythonhosted.org

Well-known

baseline severity, 96% confident.
lib pandas data analysis library import

Objectives

notable severity, 84% confident.
command-and-control/backdoor/tasking Python JSON command response fields
component severity, 92% confident.
anti-analysis/geofencing hostname equality literal
component severity, 90% confident.
anti-analysis/sandbox-detect Regex component marker
component severity, 84% confident.
execution/lure Cue to run/execute/paste
component severity, 90% confident.
supply-chain/metadata-anomaly/manifest PyPI metadata omits author email
component severity, 93% confident.
supply-chain/metadata-anomaly/registry Regex component marker

Micro-behaviors

notable severity, 80% confident.
fs/file Copies a file (shutil.copy)
baseline severity, 70% confident.
data/decode Hex decoding via int(x, 16)
baseline severity, 85% confident.
fs/directory File deletion operation (Node.js/Python)
baseline severity, 80% confident.
fs/path Expand user home directory
baseline severity, 80% confident.
fs/write/file Write to text file (open with 'w')
baseline severity, 70% confident.
os/package-manager pip install command
baseline severity, 80% confident.
os/random/prng Python random module import
component severity, 90% confident.
crypto/library Crypto exchange fetch method
component severity, 100% confident.
data/text/keywords "Environment" keyword
component severity, 84% confident.
process/exit Python sys.exit symbol

Metadata

baseline severity, 100% confident.
file Python file extension
baseline severity, 80% confident.
file/text Sequential source identifier names
baseline severity, 95% confident.
package PyPI package has rich metadata

20 of 27 traits shown

Identity

SHA-256 31e73991abf2faed97c9c3be4745a7b8db2b3fa47aa0caa1d14a2d04a2d92253
Canonical SHA-256 1e7f4b83ebfdcc4d0c0db787a4adf15e8533e8209d72e30b805ef1a2539c5847
Filename variantfold-0.9.0-py3-none-any.whl
Package variantfold
Version 0.9.0

Origin

Source forager
Feed pypi.org
Ecosystem python
Domain pythonhosted.org
URL https://files.pythonhosted.org/packages/21/91/786904d3b7ef466f9a7f32ca6e6dbcf9ae1fade6639e97f6beb258a857b0/variantfold-0.9.0-py3-none-any.whl

Timeline

First seen 9 Jun 2026 17:29 UTC
First analyzed 12 Jun 2026 05:14 UTC
Last analyzed 12 Jun 2026 05:14 UTC
Last updated 12 Jun 2026 05:14 UTC

Labeling

Label unknown
Label source forager
Traits version e31a3