85a87fc0baf61c21a1ee1cdf490ae324c85cc83e51c1d9ec44bc41eec98e6d9d | Triage™

Login
Reports

Overview

overview

5

Static

static

3

bin/Onedrive.exe

windows10-2004-x64

3

bin/Onedrive.exe

windows11-ltsc_2024-x64

3

bin/msvcrt...30.dll

windows10-2004-x64

3

bin/msvcrt...30.dll

windows11-ltsc_2024-x64

3

bin/msvcrt.dll

windows10-2004-x64

1

bin/msvcrt.dll

windows11-ltsc_2024-x64

1

bin/ruby_b...-3.dll

windows10-2004-x64

3

bin/ruby_b...-3.dll

windows11-ltsc_2024-x64

3

bin/ruby_b...-8.dll

windows10-2004-x64

3

bin/ruby_b...-8.dll

windows11-ltsc_2024-x64

3

bin/ruby_b...-1.dll

windows10-2004-x64

3

bin/ruby_b...-1.dll

windows11-ltsc_2024-x64

3

bin/ruby_b...10.dll

windows10-2004-x64

3

bin/ruby_b...10.dll

windows11-ltsc_2024-x64

3

bin/ruby_b...-3.dll

windows10-2004-x64

3

bin/ruby_b...-3.dll

windows11-ltsc_2024-x64

3

bin/ruby_b...-1.dll

windows10-2004-x64

3

bin/ruby_b...-1.dll

windows11-ltsc_2024-x64

3

bin/ruby_b...-2.dll

windows10-2004-x64

3

bin/ruby_b...-2.dll

windows11-ltsc_2024-x64

3

bin/ruby_b...b1.dll

windows10-2004-x64

3

bin/ruby_b...b1.dll

windows11-ltsc_2024-x64

3

bin/rubyw.exe

windows10-2004-x64

3

bin/rubyw.exe

windows11-ltsc_2024-x64

3

lib/ruby/3...mp.bat

windows10-2004-x64

3

lib/ruby/3...mp.bat

windows11-ltsc_2024-x64

3

lib/ruby/3...ms.vbs

windows10-2004-x64

5

lib/ruby/3...ms.vbs

windows11-ltsc_2024-x64

5

lib/ruby/3...er.vbs

windows10-2004-x64

5

lib/ruby/3...er.vbs

windows11-ltsc_2024-x64

5

lib/ruby/3...ow.vbs

windows10-2004-x64

5

lib/ruby/3...ow.vbs

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
TRUE.zip
Size 10.1MB
Sample260925-pmatxa11dy
SHA256 85a87fc0baf61c21a1ee1cdf490ae324c85cc83e51c1d9ec44bc41eec98e6d9d
MD5 5e89b3e3bdc00757577aac0258f1a57b
SHA1 8fe5457a5c296d71f2a395c34684b9cf73b44a27
SHA512 447aa0a65a14d2c6855568224ec931117a8f4e79cdebbeb311426bfffde1dd6c79dc5e9573b3e2fc82bbd4b93ecfeeaeb70e86a73c8d18281f1857b70b3384af
SSDEEP 196608:YeGkCCBuyF3XIdXxVzIkaNYSCTG3V+4V5qfLwRr+PKUWqawbiNZVI8oKrdm8hL:YI5IlzIkaN5CTU+O5qzJWtwbordmqL
TLSH
T17DB62335C1CD45A1EFFBF73AA4CE0D229A64C8156CDCE6169E78D4930C8E5D2078DA2E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

bin/Onedrive.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

bin/Onedrive.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

bin/msvcrt-ruby330.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

bin/msvcrt-ruby330.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

bin/msvcrt.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

bin/msvcrt.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

bin/ruby_builtin_dlls/libcrypto-3.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

bin/ruby_builtin_dlls/libcrypto-3.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

bin/ruby_builtin_dlls/libffi-8.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

bin/ruby_builtin_dlls/libffi-8.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

bin/ruby_builtin_dlls/libgcc_s_dw2-1.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

bin/ruby_builtin_dlls/libgcc_s_dw2-1.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

bin/ruby_builtin_dlls/libgmp-10.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

bin/ruby_builtin_dlls/libgmp-10.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

bin/ruby_builtin_dlls/libssl-3.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

bin/ruby_builtin_dlls/libssl-3.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

bin/ruby_builtin_dlls/libwinpthread-1.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

bin/ruby_builtin_dlls/libwinpthread-1.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

bin/ruby_builtin_dlls/libyaml-0-2.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

bin/ruby_builtin_dlls/libyaml-0-2.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

bin/ruby_builtin_dlls/zlib1.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

bin/ruby_builtin_dlls/zlib1.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

bin/rubyw.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

bin/rubyw.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

lib/ruby/3.3.0/bigdecimal/ludcmp.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

lib/ruby/3.3.0/bigdecimal/ludcmp.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

lib/ruby/3.3.0/bundled_gems.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

lib/ruby/3.3.0/bundled_gems.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

lib/ruby/3.3.0/bundler.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

lib/ruby/3.3.0/bundler.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

lib/ruby/3.3.0/bundler/cli/show.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

lib/ruby/3.3.0/bundler/cli/show.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  bin/Onedrive.exe
- Size 34KB
- SHA256 4ac3e37ba1134ac480a91f93b49ee3db5d3b96662256d0d2355489d533162f5a
- MD5 942fb43a7d369c4683e4bc77c336dbc1
- SHA1 d830e66ab17846831cd94dfdf85251b0d9019e2f
- SHA512 4e9fa624bb90ad0e9efd876d6cbf6acaeec19711c09eaba18aec7957c8a9e6c7458b23c8ad47e2fe7cc351fc3442f011afa5c562f7ce01814dada7a05d681199
- SSDEEP 384:FJ4jU40QtGDLNyuT533Y7kt8gbzwmTzPuGXEI1Fck2+bw9Ei:FHotENZskmgHJjuG0Gmk2+bw9E
- TLSH
  T116F24C17FA0364A1F7E176B89DE7C7F1D32DBD120935CA2BA688F668345E6835C06087
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  bin/msvcrt-ruby330.dll
- Size 4.9MB
- SHA256 dbf76020fc8aa4f4d42698077dfdd6d94d22166a7bc7f1b68c574611f46b879a
- MD5 5fe73a2c95dbe0d330d25c5785dfdf5f
- SHA1 97d636f70b263b0d9e82a1ace9cc38e2d78184de
- SHA512 ed4aa8fac908665c9f415ef8bcd3409039fdeae424704569d7c7050f78365387b176c62be3dce5eb05d6aef1d6385efc3cad30edee0134a6347d1c482fa205a2
- SSDEEP 98304:mWQUoyZaXBO/c4TOHXXuAVw0QYXq+RTorMWft0yOghL3PZaYTqWwvT3:mWQqZaxWc4a3XuAVw0kwTmd/UYTqWwvb
- TLSH
  T11F361748FE8791F1EE6B04B0898BE3BF46356F55C421DDF6EE4C2D86F933612110962A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  bin/msvcrt.dll
- Size 29KB
- SHA256 8e9d8b25bc2a2507eb0c34896ceebc65c32b8cc866342f9e6cfb162591327eac
- MD5 39997525d15d3b5fdf06a861d23a2912
- SHA1 e41594821989e8cea68e3666a05f54137bdc97ba
- SHA512 2382454ccb4ba39a0a227a88e9290ff1c67065664be0feb94f9a26dbd2a95ea7c039c0338e3165350d2e866259caa53c487e569aee6631e12b54d12467f23922
- SSDEEP 768:xLRy9q37CFQVSfiJAQz0GMmnTOQ3bdBb5gr89xWTK4xc:xo9q37C2VSKJp0GtTOQpvLY5c
- TLSH
  T179D27D3838046C967A6F572BD7BADCEC03AA26B35C97E8994175E7C300E37B5ED05809
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  bin/ruby_builtin_dlls/libcrypto-3.dll
- Size 4.4MB
- SHA256 08c9b7c0fa5478ef290b33f8d77adc5915d6771671ac22582f8b2aa90fa65eb0
- MD5 e670237044977a374e28df25c63adabe
- SHA1 2d3ed4807ca13d401bcd77ba91a85e2e6f17e1dd
- SHA512 e2dd08b0eced3440b7aec0c84a2f543b4ca32c821ecfb0eb0768c848ba0d6254483ea919efd589d833b5a8b35f3cc13aed03334cc8612dd651434adfdacfcf79
- SSDEEP 98304:lQ89W3YO2jaupSFT+ClvPx48zt6X0k5+WrIC+eV4DdXNoll9u4fiOvr1CPwDvt3q:lQ82B2jaupSFT+ClvPx48ztfk0BeKDd3
- TLSH
  T15F262858EA4728F1FE6354F08D9BF3BF46246A01C431EEF6EE4D5946F833A121129366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  bin/ruby_builtin_dlls/libffi-8.dll
- Size 37KB
- SHA256 e53fdd9064425e9afc7ed04be76ef4bf16dd1ec14b7bc240201075f57351ef87
- MD5 ff08e7ea01a4f830da1e15e5bf11f5e3
- SHA1 c93a64a8c60a9f7f09c543b1cee096833c7d4dd0
- SHA512 c5dcc22f308c0c923cbd6ada01aaaa802279991c3b070bbf58df44fc4635ca80042949aef121d12a49738a36e1e0b351c616d88f76ad85ac1514dfa1b83dfc92
- SSDEEP 768:mOja/gwY4skqUeeAHAECDWTZZccccccccccceccccccwoG5O263okJS0BnM:LQvsBkgbCD9kM0tM
- TLSH
  T11F037D96F60595F2D18292B1ED8BCFB2C1349B23493165B3FF0EF66DF5313926026206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  bin/ruby_builtin_dlls/libgcc_s_dw2-1.dll
- Size 206KB
- SHA256 dbcdfe4d57794d696ebfb10e54df329ab608e5699d48aee662bf66c1da82cc05
- MD5 959143f2e2bbf90ecfa5824c6da00017
- SHA1 c59d2be57999ddc4a60c5c8e5c484d5c7094d220
- SHA512 5273db064468e339a2c334b97bae555429d0fbfbe0fac1342cafb05e0e891356b3b250ce80ca96695ca40b23a50547877e2a7b405d6aa11c3a0e0a7380549e32
- SSDEEP 3072:5cKxDWKgg4efZIJm9xK0m2//xUTcewLCps/KGwe+DK:BTr4ef9xK0m2/2r1cKzK
- TLSH
  T1D4243B54F58314E0DA5BB9B058979BBAD9307F250134EEBAFFCCA759B032B42560A04F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  bin/ruby_builtin_dlls/libgmp-10.dll
- Size 610KB
- SHA256 ab3888745ca79f6f3888dab36110802ed2114ee024beb5694093ee1508126a56
- MD5 fe087d5ecac89e6ca8b6f741e99a5f62
- SHA1 d2e7cc46bc569bb8b6989b58a73558a71a791e99
- SHA512 553777e70bc1880d287a75d8cab3d75399ccd79f716525ab2cfab1b6ec6e44b52c5c1a7e8efbb6e2bdb49676cd5c1a16f0b33e6b888bc0f68f413feb6c46c581
- SSDEEP 12288:jzxGSbIZLt1HKMyzQ1MBOYMH/o7WzsFZHVWDkOhM0oGjY:jzxG0IIMyzGaJMHcWgvwDkOhM0oGjY
- TLSH
  T173D41A25FA8754F2F253A6709447EB7FC210AF054030FA7FFB09AA42F5B36636919246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  bin/ruby_builtin_dlls/libssl-3.dll
- Size 1.1MB
- SHA256 2aeed87bcd39f797ef6b2f1bd8058bc9be48a2c9aab51e9936a159c50152f2b0
- MD5 ec67ab5b901bbddf866d382bfd5f1c44
- SHA1 80e872633b77002629a2bbd68cb2504c8464296f
- SHA512 902f1730495dd899e6821913dd1b98bea816a48469b03f5811778a189e450e6d22ab746b172ac728aa5a9086b31b84d572f41ae1920e9101e3aadc9ec8d3971e
- SSDEEP 24576:8gXh/8t9DyHfFTh1eSP53etFh4lDprVlD03DjVRnx6Km39sKXnQHfohlzJs+PKEL:vXx8Y93x3wFh4HyjPxM9sKXnyfohlzJh
- TLSH
  T1E13528A8EA4764F8ED5398B59A87F3FF473A5302C521EDF7DE4C1985F933A121108229
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  bin/ruby_builtin_dlls/libwinpthread-1.dll
- Size 71KB
- SHA256 a741bbb7a3a15220f67a037c7c4c952cf1d63e1b75916b4079f91b248c5eb29e
- MD5 470fa8b0cfb9d48908727fcd978e7b91
- SHA1 4aa2ac9fb85dbd87593993c48dd2bcf2bdd8ac7e
- SHA512 489813114d90b5e16c722c32f0eaaf60559b7de82ca7789dbc8db4e663fb619f79dcaaacb4c3faaac083e586ec2a4dbbf2dfd3333cc7216d1976bdd7b402ae63
- SSDEEP 768:1puVAvS1Rtj/+8TQN0+2r0u+lDN0uVdjUrdONC9yWrsG70DKPm7YuF472uIW:CAvS7tWzCrkDyIe8lyH7IKPm7YZ72uIW
- TLSH
  T18C63195DFB0798F1E1B215B6ADDBE3B3856257010A26E7B2FB4DA24EB437F22440504E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  bin/ruby_builtin_dlls/libyaml-0-2.dll
- Size 151KB
- SHA256 05b451d86d5d3f6d5340dff2807c99bf8640ac2a35b5f398f90a9c4ee2549f80
- MD5 bd06b31ada748e58d9ed73699c9684ca
- SHA1 797e36ef247df77bbfa41527ae525e02f2cba141
- SHA512 023c31d96531b0ccb6047326a16a2d419e7f6c4159f73f19d2ea46deab70f28973dbd8d99c12a7110eca9e9b2c040f93f564674368a29bac5d596a4ffceceeb3
- SSDEEP 3072:b3ZgkzK/tZS1HFHpTfuyMnxcuI/amRoApiBGk6Pr:zZd2/fSZKyMnxc9DRpGE
- TLSH
  T1F5E34A19FAD704F5E9E361B0644BEB2F863562018535DFFAEF0A2F25F927640260C16E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  bin/ruby_builtin_dlls/zlib1.dll
- Size 124KB
- SHA256 fb34947b2c2be86d1c5f0b227157e07f9e0c4093eb9e1043a526dbab214ac425
- MD5 877678d22b0cb8b9a83594c78a199b0e
- SHA1 181feef3fe929092800401f0ec4103b96907109a
- SHA512 dc3d7631808e9f6f2315b6ee4541d4d4ae1f55e8f190045ff54a7e15d10e5af587b20712f20ed6ef8621c64cef86a18e10a566aa153aeb02be910a9a0e7967bc
- SSDEEP 1536:dueqmayfnOwQZHQgSnlY/8weRAi1e0Pzktos6yIGpicgAK0vDAIO8NIOs6GOsIy:8exay+wlnISeG4hPIGpiSa2s6Gd
- TLSH
  T19CC35B95EA8314F2E6B355B295CBD7BF8221B1054231EAB7FB4C634DB43379125092CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  bin/rubyw.exe
- Size 34KB
- SHA256 e9d089c2a37ffe723da198aa79abd5fcf404e620cd0a7b3aaa4428ea7f180c8f
- MD5 0b82d924ecd6b51f3bc40febe14b472a
- SHA1 2a0202ee7d113ac2d469aa5dfaa98846c14c3392
- SHA512 166de0773d6385e23ebcf981fb92182a04236402113c9b84710ca959eda318ac289fcc25ddd6b0744faea33dff253bde5935b1d24654fc98ee16057cef89f92f
- SSDEEP 384:UJ4jU40QtGDLNyuT533Y7kt8gbCcU16knE6NO7wkSJn+bhAEi:UHotENZskmgucU1XECDz+bhAE
- TLSH
  T147F23A43F705B8E2F6A69B709CBBD771C12EBE510560992FAA4DF61D303F183A81018B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  lib/ruby/3.3.0/bigdecimal/ludcmp.rb
- Size 2KB
- SHA256 d8b58f17b6c0ceb2b11f7de5f56a039335fd1e165d33182d9afc5ba87ed2cd85
- MD5 586dced260de34055cad0e5ace202923
- SHA1 a01901bad1476e959b1c3210cfadfd716b228aee
- SHA512 fc74d92ad34fce90aa6d065a1511c14555d0ab763c88b1d608fa1e1855664106bd685e5a23abed46761d5ede9f9a72e2d64b0e714a0fccc2b69cb0990c1041a6
- TLSH
  T1EB41B76E895216B8350B995A4CB50C8ABF28717307946A2939DF82C81FD602253FDBF6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  lib/ruby/3.3.0/bundled_gems.rb
- Size 6KB
- SHA256 9f7c6497e219e9e80b69d3843d9f9b61b56b28e5ac2e9aa64a9260cb4f4225b7
- MD5 a45c987de23d222a33b2e183b4c0ef57
- SHA1 bdf77fad4582945e3687b62f8fe03377af1daa55
- SHA512 f8a3f8dfc3773ee9caa2724082bc5348248a13146c2077865f34319ad4641d172c56fb6d4e707d10365b3c20f6468b80146cd2c632305f5bfc654e4c9c1a6ecf
- SSDEEP 192:iQTgVahmiWz2k9O35O6H7rlKGawVDQA7uie5jz7zq:p8U8iWKCs5OMroG//Ciknfq
- TLSH
  T1DCE1946F8DC62DB022E386FC64405912AE15D47F06840638B5CCD4ED2FD96BA63F27E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral27 behavioral28
- Target
  lib/ruby/3.3.0/bundler.rb
- Size 23KB
- SHA256 16955b68dfbb5e24cb9adb28dc5182ed1019c52ab6a290894edb0bdec9617975
- MD5 768215c0638a5eb2c05b5db2fb5a2c77
- SHA1 482980236f2fbc72700e7a0358b89f1360bb5011
- SHA512 b5ce7136192a92442fb2a09139cadb3453730b8f7f267bceaa6d4b2a5354d3125b0735a3b53050405f7d799e69e9e403595b045861d5192c30678743dcec74b3
- SSDEEP 384:fmWeUEMwIuSrMgq5HAcZGyzA/szpBF9ijQ5V0gZPqy1gZ2GZgZWp+gZEuP6uSX:uWeUEMNTtcfbz59ijgV0goy1g0GZgQpM
- TLSH
  T1E9B2A50E4766683837C2D2F958083C424B15E6B75B80A024759DDBC42F2EA7BB3F6BD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral29 behavioral30
- Target
  lib/ruby/3.3.0/bundler/cli/show.rb
- Size 2KB
- SHA256 331b07481bc1b4055a06dcbab00bcc6f61ff392f7997a97d4c08b3a267b888e1
- MD5 6ba5ba75e8ed0a1af70f78d1b79aa65a
- SHA1 17acb6a8edb9d024e1ccf9139d0bfbf34200b681
- SHA512 d4aae1a26104b342e11ce51314271114cd11d3473665c19f4bdcd28982fb4f8e2edcc92ffb6743654831eb283fe44d8c7009de1a01d2ca762b2ef1b1eeb0e416
- TLSH
  T11141D81EDA67B9756A92E3B08459988B1724C70B27C5843071CD27803F2F1B6A6FB3E4
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Visual Basic

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy