Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
https://github.com/leravalera2/dtfls/releases/download/pp/get-pip.py · URL · cyfar.ca
indicator
url
hxxps://github[.]com/leravalera2/dtfls/releases/download/pp/get-pip[.]py
copy defanged
copy refanged (live)
First seen
2026-07-03
Last seen
2026-07-03
Sightings
1
Posts referencing this indicator
Armored Likho digging a snake pit: inside the covert BusySnake Stealer campaign
K
Kaspersky
GitHub-hosted get-pip.py script fetched by the loader to install pip and pull malware dependencies
2026-07-03
