Overview

overview

3

Static

static

1

cffi-1.16....64.zip

windows7-x64

1

cffi-1.16....64.zip

windows10-2004-x64

1

_cffi_back...gnu.so

ubuntu-22.04-amd64

1

cffi-1.16....ICENSE

windows7-x64

1

cffi-1.16....ICENSE

windows10-2004-x64

1

cffi-1.16....TADATA

windows7-x64

1

cffi-1.16....TADATA

windows10-2004-x64

1

cffi-1.16....RECORD

windows7-x64

1

cffi-1.16....RECORD

windows10-2004-x64

1

cffi-1.16..../WHEEL

windows7-x64

1

cffi-1.16..../WHEEL

windows10-2004-x64

1

cffi-1.16....ts.txt

windows7-x64

1

cffi-1.16....ts.txt

windows10-2004-x64

1

cffi-1.16....el.txt

windows7-x64

1

cffi-1.16....el.txt

windows10-2004-x64

1

cffi/__init__.py

windows7-x64

3

cffi/__init__.py

windows10-2004-x64

3

cffi/_cffi_errors.h

windows7-x64

3

cffi/_cffi_errors.h

windows10-2004-x64

3

cffi/_cffi_include.h

windows7-x64

3

cffi/_cffi_include.h

windows10-2004-x64

3

cffi/_embedding.h

windows7-x64

3

cffi/_embedding.h

windows10-2004-x64

3

cffi/_imp_...ion.py

windows7-x64

3

cffi/_imp_...ion.py

windows10-2004-x64

3

cffi/_shim...ils.py

windows7-x64

3

cffi/_shim...ils.py

windows10-2004-x64

3

cffi/api.py

windows7-x64

3

cffi/api.py

windows10-2004-x64

3

cffi/backe...pes.py

windows7-x64

3

cffi/backe...pes.py

windows10-2004-x64

3

cffi/cffi_opcode.py

windows7-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cffi-1.16.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

  • Size

    432KB

  • Sample

    240530-gw8hjaaa66

  • MD5

    478a21f965651fff45730adb228091d2

  • SHA1

    b7c0b768cd42fd8ac0f0a358462d28c62842d211

  • SHA256

    8f8e709127c6c77446a8c0a8c8bf3c8ee706a06cd44b1e827c3e6a2ee6b8c098

  • SHA512

    4bbcdd72eb1856516c6235421f1562190e1333349686a079b2ec80ee6a02c370cadcb6b1e0d38fa6fb126368e90dd1b5f9712a92a1fa595a98f471ab2c8486da

  • SSDEEP

    12288:PboZltyJS4WvYz0bfUiz2OyLHP/q8It5vc5+TogZ5Ct1Pd:4yJS4WwgcEq/Pm5k5wvCtz

Score
3/10
linux

Malware Config

Targets

    • Target

      cffi-1.16.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

    • Size

      432KB

    • MD5

      478a21f965651fff45730adb228091d2

    • SHA1

      b7c0b768cd42fd8ac0f0a358462d28c62842d211

    • SHA256

      8f8e709127c6c77446a8c0a8c8bf3c8ee706a06cd44b1e827c3e6a2ee6b8c098

    • SHA512

      4bbcdd72eb1856516c6235421f1562190e1333349686a079b2ec80ee6a02c370cadcb6b1e0d38fa6fb126368e90dd1b5f9712a92a1fa595a98f471ab2c8486da

    • SSDEEP

      12288:PboZltyJS4WvYz0bfUiz2OyLHP/q8It5vc5+TogZ5Ct1Pd:4yJS4WwgcEq/Pm5k5wvCtz

    Score
    1/10
    behavioral1behavioral2

    • Target

      _cffi_backend.cpython-39-x86_64-linux-gnu.so

    • Size

      956KB

    • MD5

      4a5ecc1d051bc7f9290f68b945f54c3b

    • SHA1

      7fc32ff52661ac20906ec33aba76101fc602d78f

    • SHA256

      4c5a2546ab3573729eb16adff25540680660f1943e229db075a02a1a1cd967f9

    • SHA512

      af43ece5740de09b034f360ba48ccf50a4cd66e7a3dc8c1d4978d43621eba36f1d06ea53222e0cf823a035732fa281e9023a773205ce200b43b55d1ca5c91c7c

    • SSDEEP

      12288:ZsgZDx36sAzCIA7ymKfMdo1UDEJigkIU/x0VgW:ZsdbpHF/TkIUtW

    Score
    1/10
    behavioral3

    • Target

      cffi-1.16.0.dist-info/LICENSE

    • Size

      1KB

    • MD5

      5677e2fdbf7cdda61d6dd2b57df547bf

    • SHA1

      65e8b9015ffb0747c23370a3d3af2a796c64780e

    • SHA256

      04b80f5b077bbed68808cfebadeb5e3523f2a8c9a96495c587bd96df1eac2a33

    • SHA512

      dae837fef0610ef3ba81a87c121ded5ce35d9257401eae177bd4c84b4e74fbf2c141572702f88e929aa122011f9035962266fadfed88b1b0376b0f2d933df468

    Score
    1/10
    behavioral4behavioral5

    • Target

      cffi-1.16.0.dist-info/METADATA

    • Size

      1KB

    • MD5

      2b4a69c2c5594b6985773f8813c399a0

    • SHA1

      d2701aa881909fdc42bb6d8f8f45fbde4c6b7dd8

    • SHA256

      a8e048da2d2a4a52ce2b09b33636c97cb9ab4f31d5fc9152eee29b7058ffa7d6

    • SHA512

      8fb2617e957bc3ed26b611938a351ef63384b1c3d084e6dd59e0929774cb7f2e4d8a47f4ff034515bf0e7312bad816864fac927856de9eced7e148064dacbb31

    Score
    1/10
    behavioral6behavioral7

    • Target

      cffi-1.16.0.dist-info/RECORD

    • Size

      2KB

    • MD5

      a1e6efeab3be29e246e7f7d6ee33bf57

    • SHA1

      7d2ad14a01af776aaed9b6eae12a8870ffd19f10

    • SHA256

      b70c4260426deec2e86b06beff04bf1f2e73acd5b7c41bd04848fb1dc0928642

    • SHA512

      fccc1dedc11bccc86f2d232e6c40e2cf6e2f07187a25fead675eb80f63981d91c171b81b3bf0fbd8a4afb26d5c2da0d102069cbbf884f3f216161c43fe2602fc

    Score
    1/10
    behavioral8behavioral9

    • Target

      cffi-1.16.0.dist-info/WHEEL

    • Size

      148B

    • MD5

      fb7562a2960253440f28d8de836d743e

    • SHA1

      1ff9558c02fac12fd58eacaf175f37a77e2f07e4

    • SHA256

      fc131db69dc8438345ed514c283e250fd0a29341f75a110fd6fb46db65705e15

    • SHA512

      7d462ef599c4948535447e77291a19aa965ced70c0e84d529586efddf1944b2e7245e0a3867aa1a4e3a81513480a0277e9f3eda3e454d3d7b9934f171433f03e

    Score
    1/10
    behavioral10behavioral11

    • Target

      cffi-1.16.0.dist-info/entry_points.txt

    • Size

      75B

    • MD5

      688ceebec0652fc05ac25caec3e15043

    • SHA1

      47683b6e62bbb8296c0d36cb979c2593bcbb6fe1

    • SHA256

      cba8d3c67c9eb8b9cbf9725c0eff2e30bde7eb0c98886460f0c4e9fd0189f47a

    • SHA512

      d65a67e5e16aa06366d2e8ebaab1ebd873ab782f5a0d6331f074a48d06ee4051950c4508a5a8e780897bed5c32d41f34e9c8f96df0d8c4ed61a434ae121581d0

    Score
    1/10
    behavioral12behavioral13

    • Target

      cffi-1.16.0.dist-info/top_level.txt

    • Size

      19B

    • MD5

      67ea4a90c355e59a4eb7026e12e6aa43

    • SHA1

      5a38c6f6b4ba1cf98f2377db77f55a568089d94c

    • SHA256

      ac4ed6477ad97cd2b1588f7e8e7ea1b0708097b303901f859ae41bc568c57a14

    • SHA512

      d3ffaff727c7b534e3dfb0fe8d93011c0b1ad5f4731f7b01b2247af5a01ed52095234adf046b6f843cb1a45692e55125f544848b5ae31923150185db8da63a0a

    Score
    1/10
    behavioral14behavioral15

    • Target

      cffi/__init__.py

    • Size

      513B

    • MD5

      82e8d2b1149b5c3d7a023c0f412b3ab3

    • SHA1

      7e923425ad3edfb78dbecb4ae92d7edbcec4e5f8

    • SHA256

      b849f36979509dd47d9dcf1aaf5aa4ebf7283447f17e7e29034b163d583630ff

    • SHA512

      515b31d692c4e1b22ddfd079e01203eb5535810c317361b62b47a624ecdef4fe003c4bc86e5e4ef076fb2e20da8a9b5243dd98c71fedc80373649d0d38e628d2

    Score
    3/10
    behavioral16behavioral17

    • Target

      cffi/_cffi_errors.h

    • Size

      3KB

    • MD5

      64efe54b03e5ae3a4da6775598600f51

    • SHA1

      d9e39b52a6ac381c482234ee5b50883c364f0422

    • SHA256

      cd05edeee47f9bc8145be7c8da1260d0aa129091705eff111949040d9d7bedd4

    • SHA512

      fcb69759b1dda6c2a4982f847b72a54dfe51bb30025d85121c26645d1fe1b9ce56eb9e2942445d7b071b8812d0f3761460d579a9f3c369ae3af1b287e2b964ad

    Score
    3/10
    behavioral18behavioral19

    • Target

      cffi/_cffi_include.h

    • Size

      14KB

    • MD5

      a9287a7d1b3e7ec308e503e42c97da96

    • SHA1

      4a86476eb7298469702184888211a84d65d2133a

    • SHA256

      b4a9c0d6b752a0f1e9db71670cbd660c6c05a3e523e9f5df03abc0ea47281147

    • SHA512

      e0833e9f7571b5677948f340fa996adbc853a33cefdd53726855ac8753bc0519124c89daaff99c41c52f5f4b7a3566105c2e28697265836b10e5d662ddf6b9a0

    • SSDEEP

      192:KlvoVFhPqMAzcXe1Yzv/uZRj3cpNUR5SlJN7RAh+2r2jSuJjSWoRUMS:TPBEcX87CUR5SxRu4mmmztS

    Score
    3/10
    behavioral20behavioral21

    • Target

      cffi/_embedding.h

    • Size

      18KB

    • MD5

      64e443865cfe855e8f7e380f9b2a930a

    • SHA1

      31ce0831be44bed9ea8257d736a22657af5ccdb6

    • SHA256

      4049ab24a941fd6d950bad350a38f27ccbb1b60ccf430c042859703021876d3d

    • SHA512

      e71b370a1c12cfc421f7d67dc035249ec86094cd44e0d1555278a94c1926021c82698321f0c6f1340d040db0690af80384e1bef56b3c06c0217e57473c04d107

    • SSDEEP

      384:6Z8K0UfQUsVmxEKitt1Fo60VMIOpUA37OSmXNuDQxeOebie8sOHWx6tUm+8wH:XWfNNIIImoDQxeOebdHx6Um+8wH

    Score
    3/10
    behavioral22behavioral23

    • Target

      cffi/_imp_emulation.py

    • Size

      2KB

    • MD5

      e84849d59d243dfc32ddf6992db2e5c5

    • SHA1

      1ecae96b342965a0713c8ad2fb759068735040f2

    • SHA256

      4714441bccc06c8d913c6070c3dd2eff97e2f2c59d6a1a5d8a93a83f3929ec2d

    • SHA512

      4ac8cdabbdfcf23c9fc7e158bfa3d36ee6dd13c450b5cefaad8d8e12cad8bf8b7bda9f2d7cb68795e709f442596cbefdb85d4b23be520b021a9d5080a32608cc

    Score
    3/10
    behavioral24behavioral25

    • Target

      cffi/_shimmed_dist_utils.py

    • Size

      1KB

    • MD5

      b7704dcbdb4102133654ae3847ebf580

    • SHA1

      7053287c4538a4c1a008ff11605e22b852cf63ba

    • SHA256

      98bb84b71c3881bb80d837bf803ef31216fa43c5a6da504fb700baf2077d5d3b

    • SHA512

      95adbfe51375c3cc61024c4f0007fecd7bfc14242e4a745d81303aa8108066e8db3596fe0d4321134bb5da4139bab7531f3acd00a8c62fc69193a09ed687a794

    Score
    3/10
    behavioral26behavioral27

    • Target

      cffi/api.py

    • Size

      41KB

    • MD5

      9a1a757b0127030bed2f3c83dfe3bc10

    • SHA1

      5f4f649e0cbe10ee830f18b33cf0906ecb23c067

    • SHA256

      c2d254d1a1940b74f26278c1220b0e225bfb76b175f6357ecbfb2bb7b73cca18

    • SHA512

      91d33fa5d54134da1e3cf702a654167bf2dd130714c23c59990a10d939a46b1c4cc09ebd8ef75ee5de61c23d7c5954d2c5c24adfbf25f4fd0e37964a6fb54ead

    • SSDEEP

      768:kT0mWvgM/YRObkuvypJAfhjpvRHLRbCi3o/Q:kAmjM/YROUpJAfhxZLRbCi3qQ

    Score
    3/10
    behavioral28behavioral29

    • Target

      cffi/backend_ctypes.py

    • Size

      41KB

    • MD5

      cd7c9df758f20a9d6321e4ba47aa36f7

    • SHA1

      bd77055c23e89af3b6834075b539b4c99a32cd61

    • SHA256

      879648ccb73a0455579c6c9cf713ea656512eea1b2ef21520ea5deebc49af33e

    • SHA512

      a916edc82c481a505e77a79793188a2dc2e88f4a570e7b4cf0ab063f895a66e018cf303bd70da4a97fbb4444f94b7fa7841f56c67f0ec8806d284e2d1fb3857c

    • SSDEEP

      768:a2+VJgPGF+Ob5ppcyi5j+5LOoXjK9Esnv/TZwQeZgeDYDbDwDC+ADYFio5+nyxDs:V+VJgPetrhPXjRs9OZgMCvq8DYFio5+t

    Score
    3/10
    behavioral30behavioral31

    • Target

      cffi/cffi_opcode.py

    • Size

      5KB

    • MD5

      28c29f6bb1b4a4ad9d94769b233378af

    • SHA1

      a4903bb6e38a5ea65f8e16ed2809c89dd125d04b

    • SHA256

      bfd45d0ffa2f03cac2b6ab02f7922f922e55ebaeeb00e84682cddf6f6abdc693

    • SHA512

      582a94cde83c1ec8721b26e79836276e61a98697924ba0380f2951a3355679e3b7b0a18243624965b2f2cea1e56d81060badb910053e648cdd324f22a445e4eb

    • SSDEEP

      96:pyHV2pF5LRofKKdiyqwyjjmN7kihsDtEyiokEEMiwfBX313fvEyhGt:MspXLeNyWXYKokEEPyhGt

    Score
    3/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks