2d41fa9dfaa486cc0bfbdf1e39fac0db0f046bed93aab7679375b9e0dc7c3307

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/06/2026, 14:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ruvnet-RuView-2c136ac/archive/v1/src/models/modality_translation.py
Size 10KB
Sample260604-rb8mxafy7w
SHA256 2d41fa9dfaa486cc0bfbdf1e39fac0db0f046bed93aab7679375b9e0dc7c3307
MD5 27adb5a4a07b6961d80961480a28240b
SHA1 d42ec40ef30b6a8b16d1f4a87d901bd31a530a96
SHA512 d7670f682ded64d6271932328658968b5da9f1e52188821bf5074f240a67bf9ba7e249373c6df81a58a1d8632a8effc1a9d7ef045780fe46adefb0dc65e1fb4d
SSDEEP 96:xF3CaKasR2N4sMhc8OFCP0l92+ooMzZwC0b7YUGmmQbTPUiEwnfIr2jUlHdpu:xFSaKaAF90rUulfhbTsi9Ir2wlHdpu
TLSH
T18C2252D7E5863826D207E87AC6C6F41A2B2E7AD351044864FF7C70882F94274D7ABED4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4536	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\ruvnet-RuView-2c136ac\archive\v1\src\models\modality_translation.py
1⤵
- Modifies registry class
PID:1476

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads