Open-source atomic malware analysis

Analyze another

flask-cors-6.0.3-pyhcf101f3_0.conda

CONDA
Verdict: BENIGN
SHA256: 7a42167490ca51d3f81ed094be8474b787e55258d25444a9f9bdd544ebef7621
Mal-ecule
O(S₂)H(Cm)
Size 18.4 KB download
First seen 10 days ago
Analyzed 8 days ago
Ecosystem python
Source conda.anaconda.org

Objectives

notable severity, 70% confident.
supply-chain/metadata-anomaly PKG-INFO with single generic keyword
component severity, 92% confident.
anti-analysis/geofencing Equality comparison against a quoted hostname-like literal
component severity, 85% confident.
collection/database Regex for database users
component severity, 78% confident.
command-and-control/backdoor/dispatch Regex component marker
component severity, 75% confident.
credential-access/financial Regex component marker
component severity, 70% confident.
evasion/anti-av/platform "permissive" keyword
component severity, 80% confident.
supply-chain/impersonation credential filename substring marker
component severity, 93% confident.
supply-chain/metadata-anomaly/registry Regex component marker

Micro-behaviors

notable severity, 90% confident.
communications/http HTTP request targets loopback address (local IPC)
baseline severity, 75% confident.
communications/ip Hardcoded localhost network host
baseline severity, 70% confident.
data/decode Hex decoding via int(x, 16)
baseline severity, 70% confident.
data/text/keywords CRED keyword in env variable
component severity, 80% confident.
data/text Python import-from statement
component severity, 100% confident.
process/create/shell Regex component marker
component severity, 84% confident.
ui ANSI terminal erase operation

Metadata

baseline severity, 100% confident.
file Python file extension
baseline severity, 80% confident.
file/text Sequential source identifier names
baseline severity, 100% confident.
library Python standard library module group 1
baseline severity, 95% confident.
package PyPI package has basic metadata
baseline severity, 95% confident.
package/fields Conda noarch Python package

20 of 21 traits shown

Identity

SHA-256 7a42167490ca51d3f81ed094be8474b787e55258d25444a9f9bdd544ebef7621
Canonical SHA-256 13316f0a7cfb409c42ca6c249d283f327a28ea678650586f630fbb31c4d6386b
Filename flask-cors-6.0.3-pyhcf101f3_0.conda
Package flask-cors
Version 6.0.3

Origin

Source forager
Feed anaconda.org
Ecosystem python
Domain anaconda.org
URL https://conda.anaconda.org/conda-forge/noarch/flask-cors-6.0.3-pyhcf101f3_0.conda

Timeline

First seen 7 Jun 2026 06:42 UTC
First analyzed 9 Jun 2026 11:13 UTC
Last analyzed 9 Jun 2026 11:13 UTC
Last updated 9 Jun 2026 11:13 UTC

Labeling

Label unknown
Label source forager
Traits version 58380