Hostile 100% python Download

opencomb 0.17.2

Obfuscated base64 payload exec plus credential harvesting

“OpenComb – Everything developers need: combine, merge, pak, init, check, recipes & more”

Packed Python dynamic executionPython execs a Base64-decoded packed payload
SHA-256bbea1e50f1d1bfc436d9285b6944da0eb5a40b5d561faedf8f2a61d03d9facec
URLhttps://files.pythonhosted.org/packages/fd/5d/5ab7a1414d8c11c3657e155cf6e5d60408a452b79e7ea78f201c54f6278b/opencomb-0.17.2-py3-none-any.whl
MaleculeK₂(LiMc)O₆(As₄CCa₂EuS₆Xe)H₆(Po₁₅Cm₂₄Db₂₃F₁₅MgOs₇)Md₄(BkIn₁₈Pa₄)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.