Open-source atomic malware analysis

Analyze another

f1ef715cb77bdbc7db4ba9b796a46dde96181f71b4eadbdd9a20743efbf0d680.py

PYTHON
Verdict: BENIGN
SHA256: f1ef715cb77bdbc7db4ba9b796a46dde96181f71b4eadbdd9a20743efbf0d680
Mal-ecule
O(As₂)H(Po)Md
Size 20.1 KB download
First seen 93 days ago
Analyzed 75 days ago

Objectives

suspicious severity, 88% confident.
anti-static/obfuscation/code-metrics Excessive Python line length
notable severity, 80% confident.
anti-static/obfuscation/payload Single ≥1024 char encoded blob literal
component severity, 70% confident.
anti-static/obfuscation/encoding Encoded HTML tag fragment
component severity, 90% confident.
command-and-control/channel/tunnel Base64 keyword marker
component severity, 80% confident.
evasion/indicator-removal Shell execution wrapper

Micro-behaviors

notable severity, 90% confident.
process/interpreter Python exec() built-in function
baseline severity, 90% confident.
data/decode Calls base64.b64decode (Python)
baseline severity, 90% confident.
data/encode Imports Python base64 module
baseline severity, 70% confident.
data/text base64 encoding keyword
component severity, 84% confident.
ui ANSI terminal erase operation

Metadata

notable severity, 90% confident.
encoded-payload Encoded payload detected: base64
baseline severity, 95% confident.
import imports base64
baseline severity, 95% confident.
lang Source references base64 (import or shell command)
component severity, 100% confident.
file Python source file extension (.py only)
component severity, 90% confident.
file/text Very long line

Identity

SHA-256 f1ef715cb77bdbc7db4ba9b796a46dde96181f71b4eadbdd9a20743efbf0d680
Filename f1ef715cb77bdbc7db4ba9b796a46dde96181f71b4eadbdd9a20743efbf0d680.py

Origin

Source harvest

Timeline

First seen 14 May 2026 21:33 UTC
First analyzed 2 Jun 2026 06:06 UTC
Last analyzed 2 Jun 2026 06:06 UTC
Last updated 2 Jun 2026 06:06 UTC

Labeling

Label bad
Label source harvest
Traits version ed903