Python Libraries Used for Malicious Purposes - SANS Internet Storm Center
Tags
cmtmf-attack-pattern: Code Injection
attack-pattern: Data Code Injection - T1540 Component Object Model - T1559.001 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Tool - T1588.002 Scripting - T1064 Windows Management Instrumentation - T1047 Scripting
Show in Graph
Common Information
Type Value
UUID 44043a99-5e92-4323-82a5-4ddb704f0955
Fingerprint 80340471eca4a0d4
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 11, 2024, midnight
Added to db Sept. 11, 2024, 10:34 a.m.
Last updated Nov. 5, 2024, 10:42 a.m.
Headline Internet Storm Center
Title Python Libraries Used for Malicious Purposes - SANS Internet Storm Center
Detected Hints/Tags/Attributes 45/2/3
Source URLs
Redirection Url
Details Source https://isc.sans.edu/diary/rss/31248
URL Provider
Details Provider Source level domain
Details sans.edu isc.sans.edu
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 142 ✔ SANS Internet Storm Center, InfoCON: green https://isc.sans.edu/rssfeed_full.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 43 
pypi.org
Details Url 2 
https://pypi.org
Details Url 1 
https://learn.microsoft.com/en-us/windows/win32/perfctrs/using-the-pdh-functions-to-consume-counter-data