brow99.py
Classification: Malicious
brow99.py is an infostealer (script). Detected by 31 antivirus engines. Linked to Invisibleferret malware. Reported by 2 threat sources, last seen 2026-04-11.
Detection summary
- 31 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: INVISIBLEFERRET (S1245)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Invisibleferret | Triage | 2026-04-11 11:08:49 | 2026-04-11 11:08:49 | malicious-activity | S1245 InvisibleFerret |
| Generic.Malware | MalwareBazaar Abuse.ch | 2024-10-10 16:12:10 | 2024-10-10 16:12:10 | malicious-activity |
Tags
invisibleferretSample information
- Filenames
- 9ece783ac52c9ec2f6bdfa669763a7ed1bbb24af1e04e029a0a91954582690cf.py, brow99.py
- File type
- text/x-script.python
- MD5
7b9eedf8867325d4bb130c7de7eee226- SHA-1
5080f89b9266da4bf96a0449b218fab45665a74f- SHA-256
9ece783ac52c9ec2f6bdfa669763a7ed1bbb24af1e04e029a0a91954582690cf- First indexed
- 2024-10-11 12:20:11
- Last updated
- 2026-07-29 14:42:29
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.PSW.Python |
| AVG | MacOS:AMOS-E [Trj] |
| AhnLab-V3 | Trojan/Python.NukeSped.SC204667 |
| Arcabit | Generic.PY.Stealer.F.297ACF2A |
| Avast | MacOS:AMOS-E [Trj] |
| BitDefender | Generic.PY.Stealer.F.297ACF2A |
| CTX | python.trojan.python |
| ESET-NOD32 | Python/NukeSped.F |
| Emsisoft | Generic.PY.Stealer.F.297ACF2A (B) |
| FireEye | Generic.PY.Stealer.F.297ACF2A |
| Fortinet | Python/NukeSped.F!tr |
| GData | Generic.PY.Stealer.F.297ACF2A |
| Detected | |
| Ikarus | Trojan.Python.Psw |
| Kaspersky | HEUR:Trojan-PSW.Python.Agent.gen |
| Kingsoft | Script.Troj.Generic.2029547 |
| Lionic | Trojan.Script.Python.i!c |
| McAfee | Python/NukeSped.f |
| MicroWorld-eScan | Generic.PY.Stealer.F.297ACF2A |
| Microsoft | Trojan:Python/Multiverze |
| Rising | Stealer.Browser/Python!1.102B0 (CLASSIC) |
| Sangfor | Malware.Generic-JS.Save.114df07f |
| Skyhigh | Python/NukeSped.f |
| Sophos | Troj/PyDl-J |
| Symantec | OSX.Trojan.Gen |
| Tencent | Win32.Trojan-QQPass.QQRob.Tnkl |
| VIPRE | Generic.PY.Stealer.F.297ACF2A |
| Varist | ABTrojan.RNXC- |
| ZoneAlarm | HEUR:Trojan-PSW.Python.Agent.gen |
| alibabacloud | Trojan[stealer]:Python/NukeSped.F |
| huorong | TrojanSpy/Python.PwStealer.f |