Open-source atomic malware analysis

Analyze another

boto3 1.43.2-pyhd8ed1ab_0

ZIP
Verdict: BENIGN
Mal-ecule
KO₁₃(Co₂P₂S₁₄Al₃As₇C₉Ca₃Er₅EuILaPrXe₂)H₃(Cm₃Db₅Mg)Md₄(LiPaPt)
Size 83.5 KB download
First seen 103 days ago
Analyzed 103 days ago
Ecosystem python
Source anaconda.org

Objectives

notable severity, 84% confident.
persistence/system bash shell init file reference
notable severity, 82% confident.
supply-chain/metadata-anomaly Sidecar stored as single JSON line

Micro-behaviors

notable severity, 85% confident.
communications/http/services boto3 S3 client initialization
notable severity, 90% confident.
data/db/conn dynamodb string
notable severity, 90% confident.
data/text Shell executes /tmp payload directly
baseline severity, 100% confident.
fs/path /tmp/ path component
baseline severity, 100% confident.
process/create shell script command substitution

Metadata

baseline severity, 95% confident.
import imports copy
baseline severity, 95% confident.
import/python::awscrt imports awscrt.s3
baseline severity, 95% confident.
import/python::boto3 imports boto3.crt
baseline severity, 95% confident.
import/python::boto3/docs imports boto3.docs.service
baseline severity, 95% confident.
import/python::boto3/dynamodb imports boto3.dynamodb.types
baseline severity, 95% confident.
import/python::boto3/resources imports boto3.resources.action
baseline severity, 95% confident.
import/python::boto3/s3 imports boto3.s3.transfer
baseline severity, 95% confident.
import/python::botocore imports botocore.compat
baseline severity, 95% confident.
import/python::botocore/docs imports botocore.docs.client
baseline severity, 95% confident.
import/python::botocore/docs/bcdoc imports botocore.docs.bcdoc.restdoc
baseline severity, 95% confident.
import/python::collections imports collections.abc as collections_abc
baseline severity, 100% confident.
lang python code embedded in string
baseline severity, 100% confident.
package/testing File in a test directory

20 of 71 traits shown

Identity

SHA-256 ca879b9f9c6547778a47d658f2dece3b45fe24ffb1ce5402e43f8d4f5a7d1ac0
Canonical SHA-256 006682baf3c1cae25b818c2da8ff3d64188e5466527ca6c60c97823b9112adae
Filename boto3-1.43.2-pyhd8ed1ab_0.conda
Package boto3
Version 1.43.2-pyhd8ed1ab_0
PURL pkg:pypi/[email protected]_0

Origin

Source harvest
Feed anaconda.org
Ecosystem python
Domain anaconda.org

Timeline

First seen 4 May 2026 22:29 UTC
Last analyzed 5 May 2026 00:19 UTC
Last updated 5 May 2026 00:19 UTC

Labeling

Label unknown
Label source harvest
Traits version 27ac5