0d2d59dabbd96e0e58385f80554306631b6934de2ad678da87cfe75a300f7d5e

Analysis

max time kernel
149s
max time network
123s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
05/07/2026, 12:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Data/Python/Lib/site-packages/numpy/typing/tests/data/pass/ufuncs.pyc
Size 601B
Sample260705-psxwmacv7s
SHA256 0d2d59dabbd96e0e58385f80554306631b6934de2ad678da87cfe75a300f7d5e
MD5 2f6da48b1c21689a50565f64fe3c4406
SHA1 e458ea938de5223b3fe6d2b07dc1785953f65ea9
SHA512 992de19f0fb7cdb7b5688de4c6a88fb8e900ba3e8d43306b0b4d9a284b2716d8fb81cf9d10eb3522cb0876fdbf44bd9e16a3a274e44574e1bac1b258ac40a844
TLSH
T11DF08B05825215D7F875FB7AA1B2652B2F2506A43E00D90F0A186E2DFC486811EA291C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
4468	cmd.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2356	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Data\Python\Lib\site-packages\numpy\typing\tests\data\pass\ufuncs.pyc
1⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Modifies registry class
PID:4468

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2356

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads