Overview
overview
3Static
static
1yt-dlp
ubuntu-18.04-amd64
1yt-dlp
debian-9-armhf
1yt-dlp
debian-9-mips
1yt-dlp
debian-9-mipsel
1__main__.py
ubuntu-18.04-amd64
3__main__.py
debian-9-armhf
3__main__.py
debian-9-mips
3__main__.py
debian-9-mipsel
3yt_dlp/YoutubeDL.py
windows10-2004-x64
3yt_dlp/YoutubeDL.py
windows11-ltsc_2024-x64
3yt_dlp/__init__.py
windows10-2004-x64
3yt_dlp/__init__.py
windows11-ltsc_2024-x64
3yt_dlp/aes.py
windows10-2004-x64
3yt_dlp/aes.py
windows11-ltsc_2024-x64
3yt_dlp/cache.py
windows10-2004-x64
3yt_dlp/cache.py
windows11-ltsc_2024-x64
3yt_dlp/com...t__.py
windows10-2004-x64
3yt_dlp/com...t__.py
windows11-ltsc_2024-x64
3yt_dlp/com...ted.py
windows10-2004-x64
3yt_dlp/com...ted.py
windows11-ltsc_2024-x64
3yt_dlp/com...acy.py
windows10-2004-x64
3yt_dlp/com...acy.py
windows11-ltsc_2024-x64
3yt_dlp/com...ils.py
windows10-2004-x64
3yt_dlp/com...ils.py
windows11-ltsc_2024-x64
3yt_dlp/com...hdr.py
windows10-2004-x64
3yt_dlp/com...hdr.py
windows11-ltsc_2024-x64
3yt_dlp/com...til.py
windows10-2004-x64
3yt_dlp/com...til.py
windows11-ltsc_2024-x64
3yt_dlp/com...t__.py
windows10-2004-x64
3yt_dlp/com...t__.py
windows11-ltsc_2024-x64
3yt_dlp/com...est.py
windows10-2004-x64
3yt_dlp/com...est.py
windows11-ltsc_2024-x64
3Analysis
- max time kernel
0s - max time network
132s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
26/09/2026, 16:34
Static task
static1
Behavioral task
behavioral1
Sample
yt-dlp
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
yt-dlp
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
yt-dlp
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
yt-dlp
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral5
Sample
__main__.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral6
Sample
__main__.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral7
Sample
__main__.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral8
Sample
__main__.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral9
Sample
yt_dlp/YoutubeDL.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
yt_dlp/YoutubeDL.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
yt_dlp/__init__.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
yt_dlp/__init__.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
yt_dlp/aes.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
yt_dlp/aes.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
yt_dlp/cache.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
yt_dlp/cache.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
yt_dlp/compat/__init__.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
yt_dlp/compat/__init__.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
yt_dlp/compat/_deprecated.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
yt_dlp/compat/_deprecated.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
yt_dlp/compat/_legacy.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
yt_dlp/compat/_legacy.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
yt_dlp/compat/compat_utils.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
yt_dlp/compat/compat_utils.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
yt_dlp/compat/imghdr.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
yt_dlp/compat/imghdr.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
yt_dlp/compat/shutil.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
yt_dlp/compat/shutil.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
yt_dlp/compat/urllib/__init__.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
yt_dlp/compat/urllib/__init__.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
yt_dlp/compat/urllib/request.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
yt_dlp/compat/urllib/request.py
Resource
win11ltsc2024-20260911-en
General
- Target __main__.py
- Size 367B
- Sample260926-t29c8sysav
- SHA256 0f3a8c84d636cbcf5eaacd079dde213a18cc7d6f4e86785d8497431fdca2ce6c
- MD5 eb201cd9bdf1c1da2db714b11c165399
- SHA1 e010bd8efc02f8511827faabaad9f510197d2e10
- SHA512 d163561ab62be6d4b0a4cbfe64de47ee554a85497c0a685bf1e511ac5f401cebe2302721a863a17e89957ad943447e107420d27353ca27d5728d260a5288c0ae
- TLSH T12AE020F60418E5F0C1B29BC015C695F005A1F1F77E47185C7DD1484197079E0457CF96
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
-
pid Process 1495 python3 1495 python3 1495 python3 1495 python3 - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/yt_dlp/__pycache__/__init__.cpython-36.pyc.140284183510640 python3
Processes
-
/tmp/__main__.py/tmp/__main__.py1⤵PID:1495
-
/usr/local/sbin/python3python3 /tmp/__main__.py1⤵
- Command and Scripting Interpreter: Python
PID:1495
-
/usr/local/bin/python3python3 /tmp/__main__.py1⤵
- Command and Scripting Interpreter: Python
PID:1495
-
/usr/sbin/python3python3 /tmp/__main__.py1⤵
- Command and Scripting Interpreter: Python
PID:1495
-
/usr/bin/python3python3 /tmp/__main__.py1⤵
- Command and Scripting Interpreter: Python
- Writes file to tmp directory
PID:1495
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /tmp/yt_dlp/__pycache__/__init__.cpython-36.pyc.140284183510640
- Size 32KB
- SHA256 84e36c67f842011c9170788630a1ecaab0348a4c0a7cfb1aabe441184d369e19
- MD5 852add6129f3ccc66996aab9c1f2b715
- SHA1 fb411a61a4d36b569fd34a07ed65659b31e6c374
- SHA512 4d485e2dea18c2d2ff095cb032ce7e473212549cd51591a078174dbf0c5a24222774a7188c10b5694c5729d0ecdef613209be49bcf2b10137746882ae80d0a8b
- SSDEEP 768:qS/nO1zBy28S//e4ie31LKyvIKGpZl0O8TR1LczJglDd7RC:nvC7Fie31FvIjZl0O8TRaU/C
- TLSH T166E228C675B14A07FCD2FAF564FC93C1266592660398868AA01DC3D83D45AC4AFF12EF
- MD5 SHA1 SHA512 SSDEEP TLSH