Threat Reports

#python-malware "#.net malware"

Masked in Memory: A Hidden .PYC fragment utilises cvtres.exe to communicate with C&C - K7 Labs

Masked in Memory: A Hidden .PYC fragment utilises cvtres.exe to communicate with C&C - K7 Labs

During a routine analysis at K7 Labs, we encountered a Python-based malware sample that uses multi-stage obfuscation. The de-obfuscated result […]

#python-malware #.net malware #evasive-malware

·labs.k7computing.com·Nov 21, 2025

Masked in Memory: A Hidden .PYC fragment utilises cvtres.exe to communicate with C&C - K7 Labs