f0ed40694ace735f2ac973922eb5ad05bf64a86d23c2a45ae0a283abe369abd2

Analysis

max time kernel
148s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/06/2026, 13:57

Target
Discord-Mass-Reporter-main/main.py
Size 12KB
Sample260623-q89e2adt2k
SHA256 f0ed40694ace735f2ac973922eb5ad05bf64a86d23c2a45ae0a283abe369abd2
MD5 0ac60dddd221e3fbfa195fb1e566ca7a
SHA1 e51de81443ebec9ac1f1a2fb9b6641cd5bfb3652
SHA512 e861d4ab270b6cad80d1c6da56fe4679944bf658d98e4ddf1ac875d26adfd3e95374c3db2f21f3aa2c9a35c799ede04a19ecbefa0d29068a1a6d61fa8a75689e
SSDEEP 384:5yyrHQkmPVpNhLSD/nYqD/thYx2AGlfZLO:4yrHQkmVpbI/nYU/PYxX
TLSH
T1B1427435882E6D22C36788EDD8A1788273256A07860E1474F9BE43E42F6567DCDF1BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2289519114-2956110270-1748446682-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2289519114-2956110270-1748446682-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2488	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Discord-Mass-Reporter-main\main.py
1⤵
- Modifies registry class
PID:5304

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact