test

MalwareBazaar "test" label. In this corpus it represents benign test-upload artifacts rather than a true malware family. The only observed sample (7a2c8630) is a 163-byte ZIP containing a trivial Python script with no malicious behavior.

Overview

• First seen: 2026-05-26 (upload date per ExifTool metadata)^[sample 7a2c8630/exiftool.json]
• Current activity: Inactive — single test upload
• Threat level: None (benign connector verification artifact)

Build Stack

Not applicable. The observed sample is a plaintext ZIP archive with a single Python script inside; no compilation, packing, or obfuscation is present.

Deploy / TTPs

None. No MITRE ATT&CK techniques applicable.

Notable Analyses

• 7a2c8630 — 163-byte ZIP with testSample.py; benign by inspection

Capabilities

None — this label does not represent functional malware.

Related

• unclassified-python-ngrok-rat — Actual Python-based malware (batch stager + zlib+XOR-obfuscated RAT)
• python-packed-payload — Concept: malware whose logic is written in Python and distributed inside PE wrappers; the test sample is the inverse (plain Python with no wrapper)