Open-source atomic malware analysis

Analyze another

setup.py

PYTHON
Verdict: SUSPICIOUS
SHA256: b82ee1d5e59303cb3cd9d143188cd5e939b32a1307f19d9e1dce3dc77b8050fa
Mal-ecule
O₂(S₆As₂)Md₃(BkPaPt)
Size 1.1 KB download
First seen 118 days ago
Analyzed 118 days ago
Ecosystem malcontent-samples

Objectives

suspicious severity, 92% confident.
supply-chain/install-hook Malicious setup.py install hook
notable severity, 100% confident.
supply-chain setup.py file
notable severity, 86% confident.
supply-chain/metadata-anomaly setup() uses find_packages()
component severity, 85% confident.
anti-static/obfuscation Low comment line count
component severity, 95% confident.
anti-static/obfuscation/payload Python source extension basename

Micro-behaviors

baseline severity, 90% confident.
communications/http HTTP protocol prefix

Metadata

notable severity, 90% confident.
build::setup-cmdclass-install setup() defines custom install command
notable severity, 90% confident.
build::setuptools-install-class Class inherits from setuptools.command.install
notable severity, 80% confident.
build::setuptools-run-override Overrides run() method in install class
baseline severity, 100% confident.
build Python setup.py or setup.cfg file
baseline severity, 95% confident.
import imports setuptools
baseline severity, 95% confident.
import/python::setuptools/command imports setuptools.command.install
component severity, 95% confident.
lang Few generated table functions
component severity, 90% confident.
package File has 30 or more lines

Identity

SHA-256 b82ee1d5e59303cb3cd9d143188cd5e939b32a1307f19d9e1dce3dc77b8050fa
Filename setup.py

Origin

Source harvest
Feed datasets
Ecosystem malcontent-samples

Timeline

First seen 24 Apr 2026 16:18 UTC
Last analyzed 24 Apr 2026 18:23 UTC
Last updated 30 Apr 2026 20:37 UTC

Labeling

Label bad
Label source harvest
Traits version 8bf61