97791e1381dc048c05af2d1c644de11cb73291f08d0a694601a2e950ada53c35

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260630-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/07/2026, 18:11

Target
nuclei-templates-10.4.5/.github/scripts/assign_tasks.py
Size 5KB
Sample260705-wsv6csav4r
SHA256 97791e1381dc048c05af2d1c644de11cb73291f08d0a694601a2e950ada53c35
MD5 bdab449966b5c4be6dff13ee8d6fc7a7
SHA1 e9f0e102d31e4587ce2e3fef554d773f66d92af9
SHA512 91fa8aa72db16e302a07ffadf74e23af2b88181f2b7ab54f8be56963c52037d3174f362b9d8dd5f2f3d25e671b7dede47a9f7969089b12ff9c2097a9b24d4f91
SSDEEP 96:9IR3odXcrxRQkmefwTxaYc+EJowwxaYCn9m2QkPx0w6+Jc:9Vpcr/Q4fwEYc+EJohEYCnY2QIx0ic
TLSH
T120B1DF9BAC084033D76359B88C728292825BBA078BD93530B57C509C0F5976DB3FA1FD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1749168396-1890032557-311772428-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1749168396-1890032557-311772428-1000_Classes\Local Settings	cmd.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3868	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\nuclei-templates-10.4.5\.github\scripts\assign_tasks.py
1⤵
- Modifies registry class
PID:5832

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact