Open-source atomic malware analysis

Analyze another

spadata/main.py

UNKNOWN
Verdict: HOSTILE
SHA256: cafc8dc7fb047e6a59826974a0921f5c45022bb77a85af8502e1a5105eb3a1c8 · 100%
Mal-ecule
O₃(C₃EuCa)H(Cm₃)Md(Pt)
Size 1.7 KB download
First seen 64 days ago
Analyzed 64 days ago
Ecosystem python

Found in 2 archives

Objectives

suspicious severity, 100% confident.
command-and-control/channel Hardcoded Discord webhook URL
suspicious severity, 90% confident.
exfiltration/messaging Discord webhook URL
notable severity, 75% confident.
command-and-control/infrastructure/domain Discord API URL (non-invite)
notable severity, 92% confident.
credential-access/browser Python DPAPI unprotect call
component severity, 93% confident.
anti-analysis/geofencing Hostname query references local substring
component severity, 90% confident.
anti-analysis/sandbox-detect Python os.path.exists artifact check
component severity, 90% confident.
command-and-control/channel/tunnel Base64 keyword marker
component severity, 85% confident.
supply-chain/install-hook/dropper Python os.getenv call

Micro-behaviors

suspicious severity, 100% confident.
communications/http Discord webhook API endpoint
notable severity, 70% confident.
communications/http/lib requests.post call (Python)
notable severity, 85% confident.
communications/http/request requests.post with json= keyword argument
baseline severity, 90% confident.
data/decode Calls base64.b64decode (Python)
baseline severity, 90% confident.
data/encode Imports Python base64 module
baseline severity, 90% confident.
data/serialize Python json.load call
baseline severity, 70% confident.
data/text base64 encoding keyword
baseline severity, 90% confident.
fs/file Opens a file

Metadata

notable severity, 95% confident.
lang Source imports requests library
baseline severity, 95% confident.
import imports base64
component severity, 100% confident.
file Python source file extension (.py only)
component severity, 90% confident.
file/text File has 30 or more lines

20 of 21 traits shown

Identity

SHA-256 cafc8dc7fb047e6a59826974a0921f5c45022bb77a85af8502e1a5105eb3a1c8
Filename spadata/main.py

Origin

Source forager
Feed pypi.org
Ecosystem python

Timeline

First seen 3 Jun 2026 05:47 UTC
First analyzed 3 Jun 2026 05:47 UTC
Last analyzed 3 Jun 2026 05:47 UTC
Last updated 3 Jun 2026 05:47 UTC

Labeling

Label unknown
Label source forager