.. /.Pyc

Executable
Script

Contributors:

mr.d0x

Description:

PYC are Compiled Python script files. By default Python is not installed on Windows. Usually, once Python is installed, .pyc files are executed via the Python interpreter upon being double clicked.

OS:

Windows
Mac
Linux

Recommendation:

Block the execution of PYC files. Whitelist users/groups when required.

Resources:

https://www.cyborgsecurity.com/cyborg_labs/python-malware-on-the-rise/

File Samples: