daf394de44b88546610c32f45dacf5a4cee85bfd74c0c7342776ff9446d2cd02

Analysis

max time kernel
148s
max time network
82s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 12:12

Target
_pytest/assertion/truncate.py
Size 5KB
Sample260710-pdgabsbs2l
SHA256 daf394de44b88546610c32f45dacf5a4cee85bfd74c0c7342776ff9446d2cd02
MD5 0e4f0bc0702b2d0ba7f5197b499d58db
SHA1 9072b7f55f3140ed7d06ded764474e65d4974865
SHA512 01c6178680310917cf438670431d77a4c8d9a0c5ef7b2c1f82ed43208d5b69534068991b184b64eeb5a9e65e243e35f848295cc664ffea323e0518dcf25b6610
SSDEEP 96:b37fzones7KjlulKBS192Dai9vLQp9ie1IpzDeojAUphAR8c3BhKsZublhf1+a5z:b37fzones7KjlulKMeDaixMpQx5Deoj/
TLSH
T1C1B1A761E9824A7D4ABB166B6E47D01946317F771A000DE8F4DC80442F8E2ADC37FEB8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1014449518-1831897916-4205727055-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
6160	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\_pytest\assertion\truncate.py
1⤵
- Modifies registry class
PID:6116

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact