The fshec2 package found by ReversingLabs exhibited additional behavior that was likely meant to evade detection. Normally, a module is imported from a Python script by using the import directive.

To address this problem, Python requires that any code that a developer wants to run is held within a special section of code that only executes when the file is run as an application and not ...