ce8ceb71a012b5d44e2241fb44fe269c6233f03f0586b15c833d4904cc30f3ba

Sharing

Copy URL Twitter E-mail

General

Target
openai_mcp-2.41.2-py3-none-any.whl
Size 2.5MB
Sample260623-t34t5set9z
SHA256 ce8ceb71a012b5d44e2241fb44fe269c6233f03f0586b15c833d4904cc30f3ba
MD5 4154c95b4b96481cc85e89ac644f422a
SHA1 99249a99a1a7c705622d2cd1c55b93f0ccce0c99
SHA512 29e35087581efdd535a4d16472eaee917fac0a0083451a0fd6f346254b440ac7f5ff854538402376ef83f90635b04ecde2c3c54a4d987c1225a3461708939507
SSDEEP 49152:Bx//5Wc/+6+NGrjyB69OBS5xulvF3iryChTieLju6xcx4wh1rju7AfOv:BxpzGDojys9OBS5xOgjeeHumSl13mv
TLSH
T1A5C5F144DD2D44C2C5A37E79FD31585FD2A4A887F326B99AB7A0C8F036AB1984E33705
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  openai_mcp/__init__.py
- Size 12KB
- SHA256 f8eba7aafc46f204c266493e54a50de3699375e8643081c5b18390e5328108b1
- MD5 3a3e969664d8e3373f59cd94573ad35d
- SHA1 4b068f61344364e7ba87f71639a2462d4afab737
- SHA512 be879d76f542a42c3b8f1ffe05fbd6f86c2d40bea1bdb6a4e73f18e18dfe92358224ebc57afc1ecddac6a1651eb487057f14fb029e1560c715db09e86972031c
- SSDEEP 384:NuKg3wrQFEPhgD9yYvgTbtkbaiJAJbg9YbP4XuN:NuxwYvStkbaiJAJUybwuN
- TLSH
  T1B2522058AB15FA37D4918AE0DA53D511C72598C38E023AB9379D01F91F1BA2ED9F838C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral1 behavioral2
- Target
  openai_mcp/_base_client.py
- Size 74KB
- SHA256 de8a3777d353122a242dd7376bf814668d7557675b81fe36b994d3f65a598c83
- MD5 76638794781e8496fecb6f203113188a
- SHA1 d9b0854887acafcc6a36122d04f611bcce6d5b83
- SHA512 49fccd79628012c5789786f95beb7356bce2ac6ce9c9b9a8eade813affc5d2af641e91f88f927b2f627c9bcfd93a726846e00ae94506b27e856079c9f7262ad1
- SSDEEP 768:O+d12RqAG+ogjyc/6v4oGTtaoKhsB0Eqt97zY7uiqBsiE0IL2srzTSFYW8ZH:O+HhAG+ogjyghzTQPDtCXqBsiEvgYT
- TLSH
  T1AF7394541D11EA22C3E36AE59D97F6426325AC432E4534783DECC2F81F5922CE1F2BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  openai_mcp/_client.py
- Size 62KB
- SHA256 26302cea9533aa1c9b1ce433708978fa0e1704a1d8d326eb0ede5e0347fe876a
- MD5 40227f2a85fa21add3f3eae0431f91ea
- SHA1 6825448825f04f8c4bafe69c83748c32159d92da
- SHA512 6481360258a09bb711a6572479298c70e97c2ac929ae35f895ddec1ab9fe0ee74189f2527449df2fd3d714a7dc1b0bbd936853b52cf3c6175284738a5edb855d
- SSDEEP 1536:iOTLJE3Tzhaw2uJJhlYqqJpIqyDJhLyvJFs5y5JdOy1Jx/:iYLJEkjuJFYqqJpjyDJhLyvJFOy5JdOU
- TLSH
  T10B53544ADF06EE23D36765ED8587BE43B6395C630F14A224BC2C92B82F22214E5F17D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  openai_mcp/_compat.py
- Size 7KB
- SHA256 ca7b5bbec77a4dc3f586370b129aa1a336f5256e69656cbcd5c687884f2bbf9d
- MD5 ad8529f2de09fe7a1c2a78f37cf99120
- SHA1 bbccddf0d8eead56b53154559695cbbf221a2d4e
- SHA512 454dee2557b28c0ea0ab4cd584918784dd84fd99d0284f71bbd81a68420be59f86b1431303e4a6526d520eaa438147ac7f1ca0cae3fcca97d66452e0ac50d173
- SSDEEP 96:6wFFB2StQV4uUbJgSJNiJ8E9QKMhMZ6cFdFH0b09/I7xHodsjHjzMYVC:LrQnvOVE9QKM2dFH0befsjHjzMYg
- TLSH
  T1A2E183017ABEFE35CA8DC7687C83E5A6EB1559435F242430B67C93701F0D619A2F9385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  openai_mcp/_constants.py
- Size 467B
- SHA256 5a60b0813e2d1a616c4ab96d6f6e9fddb33c7ed532158933877d8dcb9ca5f92a
- MD5 15a9cd2fad2be49a74317fe022d8a5db
- SHA1 862d5afaa1b778fb8a7365b0ed3fdb0c69e98eae
- SHA512 321799b731d45f140f083f58118dbdfb415eb3a4e9c20c421938623a36d2fa7c874f5fd43476c93fd692988319832c26679ffc27c5a099bd091d8f7975d8de48
- TLSH
  T185F0DC512812EACC0A1225FF427120A2D663F245EB0464B5B771CE587BF82D7218B3C1
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  openai_mcp/_event_handler.py
- Size 2KB
- SHA256 dc405ff4d76b4f645d7df53b119c088de927bd537a1b38696a431ddfdafdc66c
- MD5 6727909ff5c16d8a15148b23e3ecc2a0
- SHA1 f4cf8a6b16424651962e067add22957f0e4d4947
- SHA512 7bdeec3908502b9d8342e7fcf87a7847dadb87437517b5e11c27a2911d2b79c83569e26da28ef55855fd830f9097120c962e63f9eb18b97eada936c75fde683c
- TLSH
  T1E25168EC691D5916C3579D7A0E81E513621BEE830D0E51F1B83D7B242F69239D0A2FE8
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  openai_mcp/_exceptions.py
- Size 6KB
- SHA256 d8032cda3acc18a75386e641fe1b57f84512aa2107243fe47e8c8c5b1eaf119b
- MD5 28f73bf57a7fe7a22f545c6bd6ebf37f
- SHA1 2c52df9ad8599b1d91b6d2ff24983db0c5bf3c89
- SHA512 cf78f3850336e6be79da2a399de10d6b472463061788e5bfacd48d6bfbc7a1108efd25af6f8982aaca1a7e8761657739ce65428b13c5b1136b77f42bb4eaafdd
- SSDEEP 192:3gD91lVT5qc714Iz9cwR9cRrQHpcycoNctcgcBc0UcT//:3gD9X7mIDx5RtH
- TLSH
  T177D14111872A5C27C3A780DBB853D461663CA643BF99183539FC03EE1F067A7C8919ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  openai_mcp/_extras/__init__.py
- Size 165B
- SHA256 b1a8a7ad85ae8c2c48c8bdb8c0da4a7cc56bf99c813e59d265fa97720d92e978
- MD5 b95a7c6040ba5ada27e447f1006f1fef
- SHA1 eaaba606f52bdd7907a697d17256f542768c2bb3
- SHA512 6010c91a81b940f1704912b67d69ca400f8f74e359523b778a796fb878949949a8223c8d98dc5b6a20e6890bda18cf02ce75123caa1083572a2eddcbddf67b25
- TLSH
  T155C04CED9621173C84FFD7941545639297B315200F0521D4003253740EEE7971959CB8
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  openai_mcp/_extras/_common.py
- Size 364B
- SHA256 3565ad81b749b0ede140643169719f564d0b8de204e40159f154bfefde6184c7
- MD5 7ed3601ad0c3fef71ee33e55d69f6838
- SHA1 f6910a48952784a1f498d0010ed2bd991cf31246
- SHA512 81ea0177b3c6ad9354bf2d98419d29736fe8d80f84d5f4cf746c82b6858abb8f044d66e5a3d9a8abf0260a1196941ac47a5dcb144b00d0a8ac2abcb2c8f1faac
- TLSH
  T1C0E0684BABF8BF00F7F3916C10E1C0320F21CE02931E1C166FD184E60A86121CA39B24
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  openai_mcp/_extras/numpy_proxy.py
- Size 805B
- SHA256 2f24d990a0dd9e3cf487548a2eca61ae1997c94b09ff111485314cac27fb93b8
- MD5 bb9091f2ab93e71d37a7d79299c1d675
- SHA1 95277ddecd899a0d12d53288559c04032df52ef5
- SHA512 71871eba1518d65191c81ae405f6c25b3ff0488411c0257401fb1172c165776aaacec0dfd56a0d8b084d8df2da9bd0102e0d024f3606576438379b93ce756e99
- TLSH
  T1C5014969A7326B15C639CCE818A5C1A323752D833F1E2875B4FD97351FC0363D974124
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  openai_mcp/_extras/pandas_proxy.py
- Size 637B
- SHA256 34212dd43ab073fd07f3961db163c313794f0c9b589c14fc1be80913f0427847
- MD5 ada4501e36a772fca3fda04e7f974e0c
- SHA1 0d6bfff0748b852dffc6bc8e50419f0f3c0dffa3
- SHA512 dce6341f892ea29a4209cdb33e897a360f1a4605761c1582c97b15116333776be3e442952fd4e8d23db36b5fa8c0b16066e21ce8216756ecb53c8141000b7685
- TLSH
  T149F07849BA623B6CD129CC9414B940A2873155523F9D247070DCA7B54BFE352F97CA0C
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  openai_mcp/_extras/sounddevice_proxy.py
- Size 725B
- SHA256 c43a04db5606bb5ddd48024992238cf5075beee388bf9cec91a2515fac5c8848
- MD5 b846d9dd956034961417847e4b8a0618
- SHA1 01e91be26a4be4245996842e4d2ac2542ecedfdd
- SHA512 bb114f4f183d4edd873c55eda2c960d88b9662d36d34962fca6ea5557880d235a08315ed912d7a3d2f35b0d44457d7b680c572fcd041c9f3ef1e50c2128173c7
- TLSH
  T188017B2E96222F1CCDBBCCB429B980A2437342523B1924B135DDD2355FA8B238974E54
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  openai_mcp/_files.py
- Size 5KB
- SHA256 f8c7e1bd990d2f6db25c2a042b1a0826ca5246046603b1b236c9d5d367cfe9b0
- MD5 b728f8e4011b4909d63cd17ac654667d
- SHA1 5f8a476fd9cf0627c1746da0b75fa808ee2827e3
- SHA512 9febb50325fa02cb00279fca7fb16a872c1d8f545a7b79331d90d01e792b205c40815d336bbcc40da90663766add03998077bc15da1a47503b43d5c99145262d
- SSDEEP 96:Y5WuFkFFqFo6S5Lo66u6okk53Jq6Q7pSP9byY6F9RcmauOmn:2WuFrAZr7VJq6Q7Ehy3RcDVmn
- TLSH
  T178B132A65CE1B441C791E79D5E82E507F21DE8CB6B28143434DC61283F86214D2F9BFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  openai_mcp/_index.js
- Size 5.1MB
- SHA256 783f414c346a79933787bd2fcad026c7ffeb95e88ba17ee99c0940480a081a42
- MD5 7dc8cf4769605db86999b7d225c765ae
- SHA1 dddb794f5a9c7a4fd79b4a0b7b084a3a080370e1
- SHA512 f9a78bb612a5ca1aa04c068cdb96295fec5745ec24c60a5ade0fa9e87e7ddab09dcab5e8840115533cec293a79033f8432811967dc78fc2256d657539aa50446
- SSDEEP 768:DTuysG+lLSXAX4XIZXjU+IHaMgMFVeGfCSOINvRoo69PeXcJ5OYemjJQpYmvSoCs:DiFG+xSQoYZwG/y
- TLSH
  T1B646D693EBDE1B4195841CF2B36DB61BD490CA5B74D53268E7F2466AF12E613FC202B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  openai_mcp/_legacy_response.py
- Size 15KB
- SHA256 3e8b0b618630fd20087d01095033fd5751ee1648325e4d1bb2a8b634ccd4d1ee
- MD5 0acce8b5bdf97f4ea76618e8665cfb5a
- SHA1 8287bee4754e843c84141d492c6e3ae796409dd4
- SHA512 bc83f0b0d945249217389e18c879fee96a10d1b897eab975782fe946c12e9203853ae8f2ffa61373c13e3150ae50deb73c00793b5ac2cc7f50d59c79e07ad974
- SSDEEP 384:HmnMYnjbJaSOvx+jj+tUSyke797p25Lp9wuwYAE:4Mwjb/Ovcj+tzte797p25Lp9wuwYAE
- TLSH
  T15E726489AE65FA2293C386B44847FE93B224AC530B59D46478BC51F82F0532DC1F3ED6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  openai_mcp/_models.py
- Size 36KB
- SHA256 a85b5516d8a03022ee8a615fab432fe0f78b500dc4c35d0707e80626d95c8d46
- MD5 5c0610a1a2cbbdf8d3a93d7e366ec519
- SHA1 308c7b3cb0201528a9df52f345af430ff0c9746f
- SHA512 2eda913594b37ea7b8fe24822374df10665f1fffe1327923336eac4f5f26f89a5c52f5ad764fe7b521fa63d04f5ff6befabe33cd6942c99ebd6b688777e84c00
- SSDEEP 384:p23rbkVfwDC6hMsyZ2XSoPVHheEEFW8pPouqvMsUL2JCNNN:xVIN2sHSoPVHYEEFdoumMP2c
- TLSH
  T135F2C816E56DA932898B45A89D8FD0C2631464135F1078B8BEECD2F56F0D329E3B23DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32