---
id: 6288
title: "Unboxing the Threat: How Malicious Python Scripts Use the BoxedApp SDK to Evade Detection"
source_domain: hunt.io
source_url: "https://hunt.io/blog/unboxing-the-threat-how-malicious-python-scripts-use-the-boxedapp-sdk-to-evade-detection"
published_at: "2024-10-01T00:00:00Z"
tags: ["malware-analysis", "rat", "evasion", "boxedapp", "python-malware", "silverfox"]
phying_url: "https://phying.com/item/6288"
lang: en
---

# Unboxing the Threat: How Malicious Python Scripts Use the BoxedApp SDK to Evade Detection

## Summary

Hunt.io dissects a sample set abusing the BoxedApp SDK: byte-compiled Python scripts and executables that run from virtualized memory to hide follow-on malware delivery, possibly tied to SilverFox.

## Intelligence Metadata

- **Sources:** hunt.io
- **Published:** 2024-10-01T00:00:00Z
- **Original:** https://hunt.io/blog/unboxing-the-threat-how-malicious-python-scripts-use-the-boxedapp-sdk-to-evade-detection
- **Phying News:** https://phying.com/item/6288