Open-source atomic malware analysis

Analyze another

flask_cors-6.0.3rc0-py3-none-any.whl

WHL
Verdict: BENIGN
SHA256: 501a76a69b4ec22a8641783eb7b3e567755736bd4a9865a61b722c0e69a48445
Mal-ecule
O(S)H(Cm)
Size 12.9 KB download
First seen 10 days ago
Analyzed 9 days ago
Ecosystem python
Source files.pythonhosted.org

Objectives

notable severity, 70% confident.
supply-chain/metadata-anomaly PKG-INFO with single generic keyword
component severity, 92% confident.
anti-analysis/geofencing Equality comparison against a quoted hostname-like literal
component severity, 85% confident.
collection/database Regex for database users
component severity, 78% confident.
command-and-control/backdoor/dispatch Regex component marker
component severity, 75% confident.
credential-access/financial Regex component marker
component severity, 70% confident.
evasion/anti-av/platform "permissive" keyword
component severity, 80% confident.
supply-chain/impersonation credential filename substring marker
component severity, 70% confident.
supply-chain/metadata-anomaly/manifest Regex component marker
component severity, 93% confident.
supply-chain/metadata-anomaly/registry Regex component marker

Micro-behaviors

notable severity, 90% confident.
communications/http HTTP request targets loopback address (local IPC)
baseline severity, 75% confident.
communications/ip Hardcoded localhost network host
baseline severity, 70% confident.
data/decode Hex decoding via int(x, 16)
baseline severity, 70% confident.
data/text/keywords CRED keyword in env variable
component severity, 80% confident.
data/text Python import-from statement
component severity, 100% confident.
process/create/shell Regex component marker
component severity, 84% confident.
ui ANSI terminal erase operation

Metadata

baseline severity, 100% confident.
file Python file extension
baseline severity, 80% confident.
file/text Sequential source identifier names
baseline severity, 100% confident.
library Python standard library module group 1
baseline severity, 95% confident.
package PyPI package has basic metadata

Identity

SHA-256 501a76a69b4ec22a8641783eb7b3e567755736bd4a9865a61b722c0e69a48445
Filename flask_cors-6.0.3rc0-py3-none-any.whl

Origin

Ecosystem python
Domain pythonhosted.org
URL https://files.pythonhosted.org/packages/66/46/5887739b6c5a0d42beef60b40d63c20091f46898249358c5f712011a2d36/flask_cors-6.0.3rc0-py3-none-any.whl

Timeline

First seen 6 Jun 2026 19:10 UTC
Last analyzed 8 Jun 2026 12:52 UTC