Overview
overview
5Static
static
1ruby-3.3.6...e/rdbg
ubuntu-18.04-amd64
1ruby-3.3.6...e/rdbg
debian-9-armhf
1ruby-3.3.6...e/rdbg
debian-9-mips
1ruby-3.3.6...e/rdbg
debian-9-mipsel
1ruby-3.3.6...nt.vbs
windows10-2004-x64
5ruby-3.3.6...nt.vbs
windows11-ltsc_2024-x64
5ruby-3.3.6...dap.js
windows10-2004-x64
3ruby-3.3.6...dap.js
windows11-ltsc_2024-x64
3ruby-3.3.6...ion.js
windows10-2004-x64
3ruby-3.3.6...ion.js
windows11-ltsc_2024-x64
3ruby-3.3.6...nt.vbs
windows10-2004-x64
5ruby-3.3.6...nt.vbs
windows11-ltsc_2024-x64
5ruby-3.3.6...st.vbs
windows10-2004-x64
5ruby-3.3.6...st.vbs
windows11-ltsc_2024-x64
5ruby-3.3.6...pec.js
windows10-2004-x64
3ruby-3.3.6...pec.js
windows11-ltsc_2024-x64
3ruby-3.3.6...tp.vbs
windows10-2004-x64
5ruby-3.3.6...tp.vbs
windows11-ltsc_2024-x64
5ruby-3.3.6...et.vbs
windows10-2004-x64
5ruby-3.3.6...et.vbs
windows11-ltsc_2024-x64
5ruby-3.3.6...op.vbs
windows10-2004-x64
5ruby-3.3.6...op.vbs
windows11-ltsc_2024-x64
5ruby-3.3.6...tp.vbs
windows10-2004-x64
5ruby-3.3.6...tp.vbs
windows11-ltsc_2024-x64
5ruby-3.3.6...onsole
ubuntu-18.04-amd64
1ruby-3.3.6...onsole
debian-9-armhf
1ruby-3.3.6...onsole
debian-9-mips
1ruby-3.3.6...onsole
debian-9-mipsel
1ruby-3.3.6.../setup
ubuntu-18.04-amd64
1ruby-3.3.6.../setup
debian-9-armhf
1ruby-3.3.6.../setup
debian-9-mips
1ruby-3.3.6.../setup
debian-9-mipsel
1General
- Target ruby-3.3.6.tar.gz
- Size 21.1MB
- Sample260813-akmncsff56
- SHA256 8dc48fffaf270f86f1019053f28e51e4da4cce32a36760a0603a9aee67d7fd8d
- MD5 51bcf91da64e5889e2e59c7adc7189c5
- SHA1 0106171cd1801fb5663e8e709f3d6c935d683c9b
- SHA512 4ae22f5c2a1f7ed84aab7587ff04ce4d9933cffe4347deaef0ab88d22c9780f274c1664a4ee1dd8235bc3cc749be828ffa8db7cb5f5002339a59a599acf3c729
- SSDEEP 393216:QzczdIAUvkvyycaoBOMR0de/IRoA7HRIsRQxaY6CymkFRqMI422hxJmWLxbA9qQ:QzJAE/9i+0YWxTRQdDPkiVN2EWFWqQ
- TLSH T1CF273372F562B1ACD2BB61834CDC85C2B9D2217605ECE1B54D0DE02AE6BB19D63FEC14
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ruby-3.3.6/.bundle/gems/debug-1.9.2/exe/rdbg
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
ruby-3.3.6/.bundle/gems/debug-1.9.2/exe/rdbg
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
ruby-3.3.6/.bundle/gems/debug-1.9.2/exe/rdbg
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
ruby-3.3.6/.bundle/gems/debug-1.9.2/exe/rdbg
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral5
Sample
ruby-3.3.6/.bundle/gems/debug-1.9.2/lib/debug/breakpoint.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
ruby-3.3.6/.bundle/gems/debug-1.9.2/lib/debug/breakpoint.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
ruby-3.3.6/.bundle/gems/debug-1.9.2/lib/debug/server_dap.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
ruby-3.3.6/.bundle/gems/debug-1.9.2/lib/debug/server_dap.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
ruby-3.3.6/.bundle/gems/debug-1.9.2/lib/debug/session.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
ruby-3.3.6/.bundle/gems/debug-1.9.2/lib/debug/session.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
ruby-3.3.6/.bundle/gems/debug-1.9.2/lib/debug/thread_client.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
ruby-3.3.6/.bundle/gems/debug-1.9.2/lib/debug/thread_client.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
ruby-3.3.6/.bundle/gems/minitest-5.20.0/lib/minitest.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
ruby-3.3.6/.bundle/gems/minitest-5.20.0/lib/minitest.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
ruby-3.3.6/.bundle/gems/minitest-5.20.0/lib/minitest/spec.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
ruby-3.3.6/.bundle/gems/minitest-5.20.0/lib/minitest/spec.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
ruby-3.3.6/.bundle/gems/net-ftp-0.3.4/lib/net/ftp.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
ruby-3.3.6/.bundle/gems/net-ftp-0.3.4/lib/net/ftp.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
ruby-3.3.6/.bundle/gems/net-imap-0.4.9.1/lib/net/imap/sequence_set.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
ruby-3.3.6/.bundle/gems/net-imap-0.4.9.1/lib/net/imap/sequence_set.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
ruby-3.3.6/.bundle/gems/net-pop-0.1.2/lib/net/pop.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
ruby-3.3.6/.bundle/gems/net-pop-0.1.2/lib/net/pop.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
ruby-3.3.6/.bundle/gems/net-smtp-0.4.0.1/lib/net/smtp.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
ruby-3.3.6/.bundle/gems/net-smtp-0.4.0.1/lib/net/smtp.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
ruby-3.3.6/.bundle/gems/prime-0.1.2/bin/console
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral26
Sample
ruby-3.3.6/.bundle/gems/prime-0.1.2/bin/console
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral27
Sample
ruby-3.3.6/.bundle/gems/prime-0.1.2/bin/console
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral28
Sample
ruby-3.3.6/.bundle/gems/prime-0.1.2/bin/console
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral29
Sample
ruby-3.3.6/.bundle/gems/prime-0.1.2/bin/setup
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral30
Sample
ruby-3.3.6/.bundle/gems/prime-0.1.2/bin/setup
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral31
Sample
ruby-3.3.6/.bundle/gems/prime-0.1.2/bin/setup
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral32
Sample
ruby-3.3.6/.bundle/gems/prime-0.1.2/bin/setup
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target ruby-3.3.6/.bundle/gems/debug-1.9.2/exe/rdbg
- Size 1KB
- SHA256 6cdf493fcf41c1788f89a4c56a09400e60700f6b69e322f72686c64e00a4a3d6
- MD5 9de663ac2998b6ef79f90b39238ea564
- SHA1 4c4473684a404291e044ea5282e1d68bd4305c9c
- SHA512 fab62bc7211983944022c06af6e22d7eddffbb9cf954da0ea842e44f01477a880e217da12cc0746740053462a31cea9b6dfdc93457e394a96d866d7988082e5a
- TLSH T140311F9745AF2C2313AAAA52D65A21140E469BF7A21D11707548B48C2F29F82EBE73D3
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target ruby-3.3.6/.bundle/gems/debug-1.9.2/lib/debug/breakpoint.rb
- Size 12KB
- SHA256 9c0b7c4d170b9bf7d730c949a5e8117077545e3c31b1d0c75d1ff7af2d687a52
- MD5 11585ad006b0f40943e14c4d67edbb09
- SHA1 f5de7eef5b04aa4f03af7e63ab9446f23bf865e1
- SHA512 4ccaf9450835df87d938bdeca5f15196476d4a6e838968e03c36ed8495edb77eada0bd8186bde0794f2398557c693f78332c38a6c98cd5ccc588cee2ff14e3ed
- SSDEEP 192:NJiIet/JQvw/iYAZ4A053bsSDbDkrB4jmMZo4tGILj1AQ3UZarsD/gySpxEKVavs:NQPZio/aELxDHkkmTE53UkUcpxRd
- TLSH T17C42425F916664F092C3C226AE9228038E11A557538A4E31BCDC88EC5F18366E7F77E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target ruby-3.3.6/.bundle/gems/debug-1.9.2/lib/debug/server_dap.rb
- Size 30KB
- SHA256 49a968c68437cacc571ad21e3bb3c881a77e40749929a4f483c5c4f50950bf8f
- MD5 4f34965349f7dc4a4c2bc72a26fa4b57
- SHA1 90531eae5b0bd8899be059387c6daca3bb89b734
- SHA512 7e5d544f16b5a0daced4536cf10a9786df68e66aab1c3fe4aa2c186cc532878c8868fdab876448c605615673f23dc2634d20c895c6c0e7cbb259bfa468731a08
- SSDEEP 384:Qp0XQaCtazMYqmbU8YZCKbtSXhwnru7T5mioft7jL7muLU6ubl:Qp0X1Q8YZjbtm0Z9GmRuR
- TLSH T103E2B75BDC5529F577C2C0296C9A69034E22A24727483A34B8CCC3E41F2572EE2F6BF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ruby-3.3.6/.bundle/gems/debug-1.9.2/lib/debug/session.rb
- Size 68KB
- SHA256 55057197a63f1394a2e166c348667fc5fbf9bd73bc96260be8c58b31e4d5c0c6
- MD5 3c627c11ad49d900fbe6e170c7765079
- SHA1 1d0d5842dba930f08d29c459b66214a3d1ffd6b9
- SHA512 c4eb2135c29a0f0b6743b4cd61d426e488cd267dd374cb86f152fb4dac98e00da6d8d18870aaf4fbd73708de32eb4a71b4c906d47a6e8e529de3e08364c82428
- SSDEEP 1536:RVC+MuMrkkPqVG6mcWn3+b6adpoxP81j91kyVcUwuu:RkXCG6mcYyVcUwuu
- TLSH T11A63A54FC9AA19FA62C2C67448A669039E16945B13C41739B5ECC1E81F1A732F3F77E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ruby-3.3.6/.bundle/gems/debug-1.9.2/lib/debug/thread_client.rb
- Size 36KB
- SHA256 86269308a217910ece09fd4cb64356e09399f012e5fc103643c2b3a828e93185
- MD5 d024553993b0be0e52952f6e5c17375a
- SHA1 8ea10d472e5351a25c3e3f47e4b17ac950f2fca6
- SHA512 91aac09980d75aca80d2b3f9ee2856a34c70b730efcbc62551bc9239ca4711d918d265407ed93da95a4328866f69f8ab1c9694c81fc0c64d55572004ca47920a
- SSDEEP 768:7xT6wb+vJAriKH3AWPx9AiRcB/gTRHhFh+zzpvWX5L+tX4UIQG:9T7bfX3AWPxmBBythFh+zztNPG
- TLSH T11C03415B99211AF4A2C3D1791D922D168E3AF06732480674B8DCC1D42F65336E2FBBF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target ruby-3.3.6/.bundle/gems/minitest-5.20.0/lib/minitest.rb
- Size 25KB
- SHA256 3e55160c250b35ecdb1b2ce2879a4f8eb2cced009182bf27bb89a3817f91c01d
- MD5 c7ee012a502fa55bfe2a2871d5e2a70f
- SHA1 96bb0243e630a94df6e9769895cfb5bd349c5c2f
- SHA512 aedb4dda3538321fd8c45ec0777e91ac85e194a4a5c5de3bd83d8e278ed2f296c5248fc9d4a6baccb81dda3aeffbae7a00d93c0f4807ac145529f7db046779a3
- SSDEEP 768:XVtvBnVwsReEVSRsjYfqtkFUeA5KD4nCKThkCKwLkK2hMvltY7+20Lv7bnkM6n09:ltvBn2pD4WCTSy9v316xUb
- TLSH T1F6C2542F668636AE50A3E7F154D4A887AB29A5374388053474BEC3D41F06536A1F3FF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target ruby-3.3.6/.bundle/gems/minitest-5.20.0/lib/minitest/spec.rb
- Size 9KB
- SHA256 6a77ad5a1ffcb68993a194e3070c02e0a1303f52130767227d3b932a11922ec9
- MD5 c0c52ee7f941083f6564ab725e1dd62f
- SHA1 0b71e230ab20b1658c9824a69a0ab5a857779dcb
- SHA512 11c2652cf1f3ced438d13b4ce3671070097de37fb26f2c7ec65afd7f1584aa0e3398c1c567914b7a42e5f1b238eb57ba35295ba896e6500a5768d1610e322bd2
- SSDEEP 192:GZjgIDJaYw/jqJREqXzxRaHGTWCsX0g3Zwc3g3Pu3FZ8baXc6gdymbru9HBUC4WW:GZjz1at/qXR2GTWCMHXKc8baXxr9HBUf
- TLSH T17012861F1B9320BD5162E6714CD5B40ABF1AD1BB83C20F68B8EEC0A01F4A45599F7AF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ruby-3.3.6/.bundle/gems/net-ftp-0.3.4/lib/net/ftp.rb
- Size 43KB
- SHA256 c8440bd0980533cc46bc0be233636ca3d32ac97cb3ee9199f5c3d7994160c1df
- MD5 2f5d77124df60687c325020863f53bef
- SHA1 40d987ca060895f344a01f33c2996c807bcd2a7e
- SHA512 fb6a653e3c997853e9de2cee16390db6c13fb95c8e9af8003cffab5f5217dfb06199c20914e24c66544d7f5e739dbf980dfec3376f271cd7e84d6ddb822ee91b
- SSDEEP 768:3uZpxD3y70j0gm0BiwfKOyk5a1Mf3b09q6nZdHrTAbUJg+GFriMOG2bSZezC+0FP:+ZpxD3yI4IBiM9109XS1+GdiMOG2b6nd
- TLSH T11D13C60FAE661AFD12D3D0A48A121C56AB29906713C8183CB5EDC1D52F24736E7F37E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target ruby-3.3.6/.bundle/gems/net-imap-0.4.9.1/lib/net/imap/sequence_set.rb
- Size 53KB
- SHA256 2ce99cb63758e1649dcc5ec51e52ad82f5e8051612f88c9e0a189aa784162f09
- MD5 f272cdda4dc3efefb6fdf1863865e6ee
- SHA1 c545f9d1023574a4956b31f508ed3d5357aaf830
- SHA512 1464b9bc099965226f8c5138e3ba40c3cdb32e093869362e6fb4fed4ec52e64e0d8b5f928f81d8a2ef09913aa4c81d6f9e0fd89eff6ee24bd6224da6642eb955
- SSDEEP 1536:a/xld2fq94O0olQl4PsuOUIuIt0XjYGu0WkeDl0kVh0JSJPjsygCoFsF:WGEgVo+Ffx
- TLSH T17F43934E6542227E86A3C63191F9D5878A4850FB51F8DC6D75BFE0A81F02E60E1FA7F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target ruby-3.3.6/.bundle/gems/net-pop-0.1.2/lib/net/pop.rb
- Size 26KB
- SHA256 8eea5e0c61920ba66a94b071d60881c9e07c3a7dd1605a7e66e0359a66f4a351
- MD5 e07081bef9f4fc7f668d3f524306dd80
- SHA1 9a94d549de651947c8e35be56b1c369e53537aab
- SHA512 2617368025eee16d1ace4516c7925768a86b2946f7e204bbdaf1f4bbba6c2e832fa52a2a0ea029ebc19c9fb27c468fea0ccc2f9f4d7d75c52eedc6fc4fb95f19
- SSDEEP 768:PB+TW58dYRQzwitV4jJz7y/4q6Hr7eMZWy2S:Z+TW58dYiVOOlJS
- TLSH T17DC2641F46D2257D03E3C161A81A291A6B34508723E2292D79DDC2992F19E36F7F3BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target ruby-3.3.6/.bundle/gems/net-smtp-0.4.0.1/lib/net/smtp.rb
- Size 34KB
- SHA256 5d48623ec390e07b379f32c1f57591126bda709d04f378f2217f009959dffa16
- MD5 7978bf9194b24f5e860070668e918c5c
- SHA1 b9a16358d599bc4a6114c3e56b95d8dde1f0cdce
- SHA512 3c4cc845ead7e99fc8a3f7fc4c0107bf6537f2b6e9d2f54bf28d6099aeec7cd7c537824663a12e94cb6d220235d7ec00b41904fa148b44b704a9ac2ce9835928
- SSDEEP 384:m5ri6Les1Ubbsbh7WCjMyKI3+P7dYJo98z6NJLLN3NAfxvybURRcm5pZcFajRoLm:mB7L/hyCfdD6NPy5tKqZ6ajRoLOCEN
- TLSH T10DF2C52E2B86297D97E3D076782968125B3580A302E0182D74DDC1F82F95B31EBF77E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target ruby-3.3.6/.bundle/gems/prime-0.1.2/bin/console
- Size 340B
- SHA256 34a23d0b89855991bee65267391a4e4a283d1d02353a95f7639f14d7b894254e
- MD5 871f8727c179e03d854828df2d67c58a
- SHA1 6bbf3dcee7bd170445b286d7f7f608dbd68db070
- SHA512 9a389ed2b98e9c216235047c4610467a53e370d3e9699c2a0325a8dd2267fa6a27d34a59fe342f640a96b9219655973b78bfc8a556a0a7fb5839f2b9227203e3
- TLSH T1C1E0C04E8281E45A2C1408A01983AB12D257C5299B10B89AEC7CC06A17E4275C711034
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target ruby-3.3.6/.bundle/gems/prime-0.1.2/bin/setup
- Size 131B
- SHA256 e201190bc24e9f00849b3efa5fbaece2cbf069703232e50c7fa15d41c47f2ead
- MD5 33cb6ede786c95ff4db308457aa63a3d
- SHA1 38ae71152a2d22a6b6418e0add993df2268cce81
- SHA512 e8a3b1a5eefa8b71634c3a030e88e883260490936f1913d3328bfaf925d31e47ac80751cef3a678672d10838ffabf9908c99649bc91ee6438e7cca0d27dcc099
- TLSH T1ADC02B2C1E0B00F08D8F07D200A5A1154E71F03C2304CCEC90C2AD18C1212533C4962E
- MD5 SHA1 SHA512 TLSH
Score1/10