Open-source atomic malware analysis

Analyze another

setup.py

PYTHON
Verdict: BENIGN
Mal-ecule
O₂(DyS)H(Po)
Size 3.2 KB download
First seen 118 days ago
Analyzed 102 days ago
Ecosystem malcontent-samples

Objectives

notable severity, 82% confident.
discovery/network/scan Google Cloud range providers
notable severity, 86% confident.
supply-chain/metadata-anomaly/manifest setup() uses find_packages()
component severity, 75% confident.
anti-static/obfuscation/eval Many imports relative to code size
component severity, 95% confident.
anti-static/obfuscation/payload Python source extension basename
component severity, 92% confident.
collection/stealer Regex component marker
component severity, 100% confident.
command-and-control/dropper open() function call
component severity, 85% confident.
command-and-control/dropper/delivery Regex component marker
component severity, 95% confident.
command-and-control/dropper/staging Regex component marker
component severity, 80% confident.
exfiltration/http Regex component marker
component severity, 80% confident.
supply-chain/impersonation Regex component marker
component severity, 85% confident.
supply-chain/install-hook/dropper setup.py assigns install_requires
component severity, 85% confident.
supply-chain/recon-exfil Python setup helper filename

Micro-behaviors

notable severity, 90% confident.
process/interpreter Python exec() built-in function
baseline severity, 90% confident.
communications/http HTTPS protocol prefix
baseline severity, 90% confident.
fs/file Opens a file

Metadata

baseline severity, 100% confident.
build Python setup.py or setup.cfg file
baseline severity, 95% confident.
import imports os
baseline severity, 80% confident.
package Apache License text
component severity, 90% confident.
file/text File has 30 or more lines
component severity, 95% confident.
lang Few generated table functions

20 of 21 traits shown

Identity

SHA-256 b3a31260e23587c39b968169012bd775115366f5209985c7f3397e5cc73e6ffc
Filename setup.py

Origin

Source harvest
Feed datasets
Ecosystem malcontent-samples

Timeline

First seen 24 Apr 2026 16:18 UTC
First analyzed 11 May 2026 12:17 UTC
Last analyzed 11 May 2026 12:17 UTC
Last updated 11 May 2026 12:17 UTC

Labeling

Label bad
Label source harvest
Traits version 46790