PROBABLY_PENTEST (1) campaign cataloged at 2025-10-25(2).
- Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.
- This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.
2025-10-benign-lib¶
Package hides an executable inside, and starts it when imported. The sandbox analysis shows only starting a calculator, which suggests it's a research attempt without a big harm.
Abuse categories¶
malware
Campaign uses malware.
obfuscation
Campaign uses obfuscation.
References¶
Referenced resources may include blog posts about the campaign, malware analysis, sandbox reports, or other relevant information.