TeamPCP - Context Manager Cleanup (T1070.004)

Ibrahim Saud@tektrix

•updated Jun 21, 2026•4•0•4

Correlates the creation and immediate deletion of the 'trin.tar.gz' archive, which is handled by the Python temporary-directory context manager, indicating potential malicious activity associated with TeamPCP.