92774d59c8f4ffe143b52997529c9ac5fc4f7c73831aafd6cf9d425de9a3adfc

Analysis

max time kernel
148s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/07/2026, 18:12

Target
bitsandbytes/backends/triton/kernels_8bit_quant.py
Size 6KB
Sample260713-wtk2saft71
SHA256 92774d59c8f4ffe143b52997529c9ac5fc4f7c73831aafd6cf9d425de9a3adfc
MD5 4485d08608fe0a4ce32e7ef945450b39
SHA1 5704f85829102fb7e418adcdc1a4ddb9b9f9b24e
SHA512 ee0266dd2c22635791363746dbf5bf79b339fae2e3f6228b4e90a0de9a6399fca38b153abfcb4a7766f53111d9ad3a9f0b1b4f05eb1e4ecfd538c58d59c0bfbc
SSDEEP 192:yqz9OZsfzqvlAl+vhzhpOCHznycXqeFdhwBD95EuzUi51f3KIS2hazJeBi:ym9OZsfGJhBnSenOEuTKIS2kJeY
TLSH
T145D1101E9894188DB35059A8AD5F1BE1CB1D8197CEC239C5FFAC9BF42F0F578421272A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2452	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\bitsandbytes\backends\triton\kernels_8bit_quant.py
1⤵
- Modifies registry class
PID:1472

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact