Local reference
Suspicious dependency
Inferred
Mal-ecule
H(Ti)
Objectives
component severity, 90% confident.
command-and-control/channel/tunnel
JSON loads call marker
component severity, 100% confident.
lateral-movement/delivery
Regex component marker
component severity, 90% confident.
supply-chain/install-hook/dropper
.exe file extension reference
Micro-behaviors
notable severity, 75% confident.
time/sleep
Python one-second-plus sleep
component severity, 90% confident.
data/text/keywords
Destructive delete verb
component severity, 74% confident.
os/container
Docker run or create verb
Metadata
baseline severity, 100% confident.
file
Python file extension
component severity, 90% confident.
file/text
File has 30 or more lines
Identity
| SHA-256 | f9cda4f2fe3a8e58aee4c5a348a6d0e69dda6266fe2a827f842a6898c0032b49 |
|---|---|
| Filename | elevateMethod5.py |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 4 Jun 2026 23:20 UTC |
|---|---|
| First analyzed | 7 Jun 2026 13:53 UTC |
| Last analyzed | 7 Jun 2026 13:53 UTC |
| Last updated | 7 Jun 2026 13:53 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 318d5 |
Not seeing what you expected? Let us know