f3d173ab5408029e92906b8a71474a6f32722d09a89a53b977b5c40ac6e8805c_zipper.py

Classification: Malicious

f3d173ab5408029e92906b8a71474a6f32722d09a89a53b977b5c40ac6e8805c_zipper.py is an infostealer. Detected by 26 antivirus engines.

Detection summary

  • 26 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: INVISIBLEFERRET (S1245)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Invisibleferret Triage 2026-04-11 11:25:29 2026-04-11 11:25:29 malicious-activity S1245 InvisibleFerret

Tags

invisibleferret adware discovery evasion pdf spyware

Sample information

Filenames
f3d173ab5408029e92906b8a71474a6f32722d09a89a53b977b5c40ac6e8805c_zipper.py
SHA-256
f30d0a244aef80898a8088c2dd29c0548cf9b9b003dd6324f173b5895293dcd7
First indexed
2026-04-11 11:25:29
Last updated
2026-09-20 21:06:40

Antivirus detections

EngineDetection
ALYacTrojan.Python.NukeSped
AVGPython:Agent-LZ [Trj]
ArcabitGeneric.PY.Stealer.F.472717D9
AvastPython:Agent-LZ [Trj]
AviraTR/Agent.LZ
BitDefenderGeneric.PY.Stealer.F.472717D9
CTXpython.trojan.python
ClamAVMultios.Infostealer.InvisibleFerret-10037451-0
CylanceUnsafe
CynetMalicious (score: 99)
EmsisoftGeneric.PY.Stealer.F.472717D9 (B)
F-SecureTrojan.TR/Agent.LZ
GDataGeneric.PY.Stealer.F.472717D9
GoogleDetected
KasperskyHEUR:Trojan-PSW.Python.Agent.gen
LionicTrojan.PDF.Stealer.i!c
McAfeeDti!F30D0A244AEF
MicroWorld-eScanGeneric.PY.Stealer.F.472717D9
RisingStealer.Browser/Python!1.102B0 (CLASSIC)
SymantecInfostealer
TencentWin32.Trojan.Python.Lcnw
VIPREGeneric.PY.Stealer.F.472717D9
VaristPY/Agent.BP
ViRobotPDF.Z.Agent.22464
alibabacloudTrojan[stealer]:Python/Agent.gyf
huorongTrojan/Python.NukeSped.a