Open-source atomic malware analysis

Analyze another

figure4.py

PYTHON
Verdict: SUSPICIOUS
Mal-ecule
O₅(C₅As₄ErIS)H₃(Cm₂FPo)Md(Pt)
Size 779 B download
First seen 117 days ago
Analyzed 115 days ago
Ecosystem malcontent-samples

Objectives

suspicious severity, 90% confident.
command-and-control/backdoor/script Windows shell command dispatch
suspicious severity, 90% confident.
command-and-control/dropper/delivery download_and_execute function (snake_case)
notable severity, 78% confident.
anti-static/obfuscation Near-zero comment ratio in small Python file
notable severity, 75% confident.
command-and-control/infrastructure Direct IP address in URL
component severity, 95% confident.
anti-static/obfuscation/payload Python source extension basename
component severity, 70% confident.
command-and-control Python os.remove call to delete
component severity, 100% confident.
command-and-control/dropper open() function call

Micro-behaviors

suspicious severity, 95% confident.
communications HTTP URL with IP address
notable severity, 75% confident.
communications/http/lib urllib request client reference
notable severity, 85% confident.
fs/chmod Python os.chmod call
notable severity, 95% confident.
process/create Executes shell commands via Python
baseline severity, 90% confident.
communications/http HTTP protocol prefix
baseline severity, 85% confident.
fs/directory File deletion operation (Node.js/Python)
baseline severity, 90% confident.
fs/file Opens a file
component severity, 85% confident.
data/control-flow Silent exception suppression via try-except-pass

Metadata

baseline severity, 95% confident.
import imports os
baseline severity, 95% confident.
import/python::urllib imports urllib.request
component severity, 95% confident.
lang Few generated table functions

Identity

SHA-256 af8c888274a15463f0693a7002adeb18f0405f73e3e950b690da9a25d3848032
Filename figure4.py

Origin

Source harvest
Feed datasets
Ecosystem malcontent-samples

Timeline

First seen 24 Apr 2026 16:18 UTC
Last analyzed 26 Apr 2026 13:16 UTC
Last updated 26 Apr 2026 13:16 UTC

Labeling

Label bad
Label source harvest
Traits version bf48d