Open-source atomic malware analysis

Analyze another

ArbitrageBot.py

PYTHON
Verdict: SUSPICIOUS
SHA256: 8c0994ce6e68a6aca5b37fe6ea469090320b401471f2d74a56911300b4431e65
Mal-ecule
KO₄(As₃CCaS₂)H(Db)Md(Pa)
Size 3.3 KB download
First seen 117 days ago
Analyzed 115 days ago
Ecosystem malcontent-samples

Well-known

hostile severity, 100% confident.
malware/stealer AiBot Stealer Dropper UI

Objectives

notable severity, 82% confident.
anti-static/obfuscation Many zero-parameter helper functions
component severity, 95% confident.
anti-static/obfuscation/payload Python source extension basename
component severity, 100% confident.
credential-access/browser time module import
component severity, 70% confident.
supply-chain/install-hook Shortcut targeting keyword

Micro-behaviors

baseline severity, 70% confident.
os/sysinfo Python sys.argv command-line access

Metadata

baseline severity, 95% confident.
import imports password_creation_advanced
baseline severity, 95% confident.
import/python::pyqt5 imports PyQt5.QtWidgets
component severity, 90% confident.
package File has 30 or more lines

Identity

SHA-256 8c0994ce6e68a6aca5b37fe6ea469090320b401471f2d74a56911300b4431e65
Filename ArbitrageBot.py

Origin

Source harvest
Feed datasets
Ecosystem malcontent-samples

Timeline

First seen 24 Apr 2026 16:18 UTC
Last analyzed 26 Apr 2026 14:09 UTC
Last updated 26 Apr 2026 14:09 UTC

Labeling

Label bad
Label source harvest
Traits version bf48d