757e39b0acc17ff2ceb81da729dd9af2c9b5dfdb7adc8bd49c6fc6d71ac940cb

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/07/2026, 11:16

Target
data/python-packages/sys_config/sys_check.py
Size 5KB
Sample260701-nc4tkaev8w
SHA256 757e39b0acc17ff2ceb81da729dd9af2c9b5dfdb7adc8bd49c6fc6d71ac940cb
MD5 5bc5e45f7139920224689ba9c31d2efa
SHA1 3fa1edbf2df965caa71302460145fbfe11f6cfa9
SHA512 d88ba5cfbe1a6bd04bb85546421386e24bf6ea9acae58ed4aa80360ccd03e35e9c117566e252236333694f5589877989988588e57b813b52bdcbd77e36f6158c
SSDEEP 96:81KMLJTjq4lULwEyTC5VIv20FwHA0B9KTav0nMD2iKLJrwMqujzvX:8tXq0YwEp5iMN9masnMD2iKLJUYX
TLSH
T19EC193210E566950C28BCC285CE3D61AA37C3E4B1708C9687DEC504A7F205F29AFBDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2420	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\data\python-packages\sys_config\sys_check.py
1⤵
- Modifies registry class
PID:4936

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact