Skip to content
MalwareWiki

Spyware

CHERRYSPY

According to CERT-UA, this is a PyArmor-protected backdoor capable of execution dynamically downloaded Python code.

CHERRYSPY is a Python spyware operated by UAC-0063.

Background

According to CERT-UA, CHERRYSPY is a backdoor shielded by PyArmor that is able to run Python code fetched on demand.

Source: Malpedia (Fraunhofer FKIE).