ce8ceb71a012b5d44e2241fb44fe269c6233f03f0586b15c833d4904cc30f3ba

Sharing

Copy URL Twitter E-mail

General

Target
openai_mcp-2.41.2-py3-none-any.whl
Size 2.5MB
Sample260623-t2bf7ses8m
SHA256 ce8ceb71a012b5d44e2241fb44fe269c6233f03f0586b15c833d4904cc30f3ba
MD5 4154c95b4b96481cc85e89ac644f422a
SHA1 99249a99a1a7c705622d2cd1c55b93f0ccce0c99
SHA512 29e35087581efdd535a4d16472eaee917fac0a0083451a0fd6f346254b440ac7f5ff854538402376ef83f90635b04ecde2c3c54a4d987c1225a3461708939507
SSDEEP 49152:Bx//5Wc/+6+NGrjyB69OBS5xulvF3iryChTieLju6xcx4wh1rju7AfOv:BxpzGDojys9OBS5xOgjeeHumSl13mv
TLSH
T1A5C5F144DD2D44C2C5A37E79FD31585FD2A4A887F326B99AB7A0C8F036AB1984E33705
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  openai_mcp/types/admin/organization/certificate_create_params.py
- Size 410B
- SHA256 894252543f073abf79a5e7cfed6cbbb2548bc5b09c080721afc92df261f2233f
- MD5 71c9c482614ec0d6173c69fe1a3e0191
- SHA1 730ece6514319f4bd11b80cb3daa169bebe8b1bc
- SHA512 5e0e4bef36853c2788086c34b90d19a286000100222fce3eaa7fa111d108251ffb116b9f849668837e31c9a14d3d550133ef9ba24ab183fa248334ccb934f53f
- TLSH
  T1D1E0AB21C0942DB8B91692F080132270937510421B060C322CE582993797FBB42FC208
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral1 behavioral2
- Target
  openai_mcp/types/admin/organization/certificate_deactivate_params.py
- Size 367B
- SHA256 d6786b61a9abf4be7fdc81895561ff8abe980140a1fc3f400d621d8f7bb21db4
- MD5 c7f124075616953555d8a29e642ee8d7
- SHA1 8b709d9a52cc3683162d4032b0496dcf15758a62
- SHA512 a97a1946bf3a65ee8ca1bf0925892071446a3cfc4b7f6ee3f31c41862bc1e9075f64fe0a49731211f1103e7600ee4b210b5ef8a033b592cfed8379b410dc503e
- TLSH
  T1C2E0612091D53AACE51BE2F1815B0372433350823B5A084261E0452437C6E2E55BC321
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  openai_mcp/types/admin/organization/certificate_deactivate_response.py
- Size 1KB
- SHA256 559886afbe45a3aaba63c6a96c69a9274dc161a0aa33c2f74cfdcf82918b415c
- MD5 82d7f029f3fdbc25015a1639a429742a
- SHA1 e99d2dd8faff61a5db5688a715aebd969a2736e5
- SHA512 61b231f0c26e667de3d624d8a3edd8bee056d418d7e0d4fc00aaafdd1a938ebd117102694e89d85f78f563f8e546af1c6e037d2e5ce5950858b2c2f734fba234
- TLSH
  T188219B43D1992EB5691F12B2464FA2D17A38416316474D323CE980D83BA2F72E6FD3AD
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  openai_mcp/types/admin/organization/certificate_delete_response.py
- Size 415B
- SHA256 16ff7dc840e5032e9fd787c1b74086663d50f03d7c27e2cf369aadd071b01a9c
- MD5 97024417687c40801523ad674d37dc68
- SHA1 f391efcfd34c21d673bb0be6af8385260994f6dd
- SHA512 94682b43e3dc709d7d98caa36b576c3da0ec084e870807796c316b380939ed80312c3ef0f4edb8a53188c9769a7d82692d39631992eb47e6d22de4bb48d94e82
- TLSH
  T1A3E0AB02C5652E10651953F7D10F40A1ED2E00034B124C222ED5594CFF92F33D9BD22A
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  openai_mcp/types/admin/organization/certificate_list_params.py
- Size 897B
- SHA256 4b116dd0cc87c40a75666a7cf75bff6b0d84f0ca03d253cf4e00db0d51b0692d
- MD5 8ce239fec8993bc96dbe4cdfcd47ea2d
- SHA1 e79422ea580de3a2b4ef7d76dc5ef1bd5aff2551
- SHA512 5048983da4651366c1348bdd9a353a15a59316b18677846371bfe258e11bcd34e058ba0649834706ddd379e494279b0c566f44ace8ed94c6384ab993048ace39
- TLSH
  T167110427E10D6E69505681B1A25A0170D7289457726024903CE8C22C7F1BF7654EA25E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  openai_mcp/types/admin/organization/certificate_list_response.py
- Size 1KB
- SHA256 8077e1d6e1893cacc4c2c3df013828ceb07bde9361d7a634e52cff56b5e1c331
- MD5 3c592f76fa96550ef7e32c546134e7fa
- SHA1 5c94bc2e5323a64d288a1d15c857bb9fbc7e9ad4
- SHA512 ef8358e4f38f9a34cde5f997bf37a73b7fbdd603fec5edec63186a74652646150831346408516bd0ae96e9025dfe6c064f447c558f5b42e72112856b509f5f64
- TLSH
  T12E216B43D1992EB9791F12B2464FA1C17A38012316474D323DE981D83BA2F72E6FD3AD
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  openai_mcp/types/admin/organization/certificate_retrieve_params.py
- Size 507B
- SHA256 a1c1c29ec2cdf380f34a5f5fb4419569381f59f6bb64be4d746d757ee7328bcb
- MD5 c17b98f47d0231b88d4ad35aa4291a96
- SHA1 32bbac9ea2a3225dc5beaacc3e4e6cc2df3e55c9
- SHA512 c9b84b1c48b6b2fafd4d90c34bdceed3bfd0fad624483a60b439124c6befe932ba2f4f10b2e928c76c899443bc62e5d3ed91378ad358d990dbd238b3006a10d2
- TLSH
  T1CDF0C962E8140E70931980F26A1B207087B66201BB82481028D8032CF78AF72D0AA3AC
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  openai_mcp/types/admin/organization/certificate_update_params.py
- Size 320B
- SHA256 84d693edb9e7d2d678cf23d62ded0d48af41683c17b3a12094c936d15f4ef7f0
- MD5 cc10f96d12fb50f3d367384be9c7779a
- SHA1 537877209ce33c9b43c6dac3c959deb70b008807
- SHA512 1895f8cc55a6d69dd774e29d560c4e47d7006780d525a969e14cc8d436f7abf19b30c601d4064c976e4ae1c0859e97089b352b462b2b8cf0ff43469628b256d8
- TLSH
  T1A0E07D31D0059EB4A62992F681573170D37601057F160C612DD842197355F3B59DC214
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  openai_mcp/types/admin/organization/data_retention_update_params.py
- Size 571B
- SHA256 4bdba80a9274b40813c94c98bb8c0735d5ecc8d77d647ab5ec89dfa3302ea55c
- MD5 f650376c2cf8f5d860d0ddcb7a0e48bf
- SHA1 913cfa9062d1507a6e468096c047ca0168c84ca1
- SHA512 4c6ed54bc9b2a98236da77e3af934b73b1ca12544c71076cbbe5dc790d81b59b7c1a4105217c524b640e916742cfe7f7fd1bba286b1cd1cc31d6bf4616e8eef0
- TLSH
  T17DF08B13E29109A9413FF1E9E685D1698332540B6F000C107AEC822C1B29A3736C5664
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  openai_mcp/types/admin/organization/group.py
- Size 660B
- SHA256 a8daf6dfcb2ae57c04d71932d1a9ea09ef761a34c10f2e823a8ca57e7d7e2f63
- MD5 0396e75bd573e7639c54c81dc1f7354c
- SHA1 a8e0139cdf8ee902b8b48f977f8e9c09e0f049a1
- SHA512 0009cbbaa0a3eb82e3a0ef5245938c8ca6ae3961483e00cbf8e1183ede48f1668e40e2cb215a1a239edf52828e0aac9599552b03e6c95585cb25bb581729a851
- TLSH
  T18E017DA7CD350F9481DF55F26A8EA690AD544163D6920C303E7C923CAF0261355F23FC
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  openai_mcp/types/admin/organization/group_create_params.py
- Size 326B
- SHA256 26c640c00a70113b84128133f469121dbd10018901629372254a68d86e862565
- MD5 5363ee98ee58ab10b02cbfaebed663b7
- SHA1 fee401e92c9ee45d3f6622897e4d53acbf86fd94
- SHA512 12b223d54db4c3cba93407f199871049ca620732a58c0e3ded2a6b4448f6b4eb2a232e5fd68d7e8c6befa5a6824935e29244444b8534efe18f90dfa0241d0fbd
- TLSH
  T1EEE07D22E5585E5CA52BD2F180266231DB7385846F1108336DF4C32C77D991B16AC369
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21 behavioral22
- Target
  openai_mcp/types/admin/organization/group_delete_response.py
- Size 487B
- SHA256 ac8e188ac5e1fbf0180e89683513d469a91134f04989061d992800080064a2f5
- MD5 24967d7817876e69e6c7459d1f5c9b68
- SHA1 8abb21c4945a0ec8fbcf92ff480aa58b252d034e
- SHA512 bf88bce45d27d506cc52bbeba3a1f3753c0a0ff0383088edc96805612e2d4b2e3934a47580913e22c76a91c0e3afb0f96107a63e2a2e100a03e3a2ca2b61e446
- TLSH
  T16FF09787CA350E44426F52EBC44D9012AE2E103BD75008303EACA61CBF4562389A10AE
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  openai_mcp/types/admin/organization/group_list_params.py
- Size 813B
- SHA256 01190e4f10f3c8f0cadb2f7f83f8dd2aeb0f3097ae960be4b0c5ffbd0ed056b1
- MD5 81b0a0a5fb30c5be92aa945e983bae8d
- SHA1 2da73b83a58ac402443769c747465e069ed24425
- SHA512 6bb5594a85b02b77c3a6d1717d64e19e96aa481541e6383b714c29c48c86f51cb00102444af7beeff771ad240a38f5680a0374ad42c7d9822ec1f22a3e68e021
- TLSH
  T17C011E23E10D6E7A908651F266991230A77CD417F79065A03CEC830C7F2BB2A59F619D
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  openai_mcp/types/admin/organization/group_update_params.py
- Size 323B
- SHA256 e65f4f7437ab6e86a70dfcb38bd823343a090c51f344944d9030b290609856c9
- MD5 78a1a389b518ca92faccbb492f837ab1
- SHA1 2b8899cafe8e55a5d3d6fc8aabd0b01e51666d77
- SHA512 755fe62fdbbe80afb98e38f5aa94b1d8aa2165b28705e73e6d576b5af4955ca2a86788539450e6d8c3b65ac8e7619c6b666b2e46a5ae961c87964bd27bcdce77
- TLSH
  T148E07D21D1549F7C926AD6F1C4573331C77241416B5109323DF4C324739BD1B129C324
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  openai_mcp/types/admin/organization/group_update_response.py
- Size 580B
- SHA256 de96e6558f7354e6226d4bf29f1b54d90cbe6a5505974ea5ef8c14c4156f81e9
- MD5 90b38dc0240c545890a27d2617df058e
- SHA1 134f5f49380548a2e0fd6ea22555ff0d7d40db76
- SHA512 5856b054f8de45d4b69b12156da32e8907921cc3ebc53ad8bf4b8bb281a501501d6a45e98c7ab25884cfa05fbccc360436244e82d457c9424b34606db137ccca
- TLSH
  T1E4F08B73DD640FA4838B55EA65CB7A207D450067C7420C307E78912CBF0360389E93AC
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  openai_mcp/types/admin/organization/groups/__init__.py
- Size 1002B
- SHA256 9c499958aaacd9771e7a559e6d505f0c9f45c5b512ca50eef6a0508432332330
- MD5 7b193b2dc1ecd88cbc9c33e675f4c00d
- SHA1 2cdb31a7c45a9e71e929ecf959cf9196cc3b91e8
- SHA512 a1a0f94fde29f1ed78e82c5d17ff46d8ebf0bb5ca6d1dd2228951b0e13bded595386844bfc88612605133e652f30a1960f2964eb411af565261315f63754cfa6
- TLSH
  T13511275D98B29B54139AA4E336133D31E5FD38847F1ECB0B2CA18A6C2A84CC2CCF8547
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32