Hyperion VS pyarmor

During our further analysis, it was noted that the package was obfuscated using “Hyperion” and specially crafted to target hosts running Windows Operating Systems. Once the package is installed and executed on the victim’s host, it fetches a malicious piece of python code and saves it on the victim machine. Later the package tries to collect sensitive information such as cookies, saved passwords in a browser, saved cookies of gaming applications and steals financial information from crypto wallets. All the discovered data is saved inside 2 files named wppassw.txt and wpcook.txt. The saved data is later exfiltrated through a discord webhook API. Additionally, it also collected victim’s geo location based on the public IP address.

As much as i hate it i have to include it. https://github.com/billythegoat356/Hyperion

You can download it here, or you can obfuscate directly from the website.

Either look at Cython, or try obfuscating the code then using pyinstaller to create an executable.

There are few vendors that provide commercial python obfuscation/DRM (though see pyarmor)

You can obfuscate) your code with pyarmor.

You might need to obfuscate your code. Refer this https://pyarmor.dashingsoft.com/

the code is not encrypted, very easy to decode if you know the python language :) If you are looking for an up to date obfuscate, you can look at pyarmor. https://github.com/dashingsoft/pyarmor