General
- Target ruby-nokey.exe
- Size 6.0MB
- Sample261107-1anqsafv4x
- SHA256 b2fb1a13a9c1cf78c419aacf5edebeb7a49901da64a0a9a739093e1919a78dc5
- MD5 c12a56694bacdea28199d979177d56c3
- SHA1 393d31d91f9029d57444e774909240b04bb10aec
- SHA512 f638c6ee65e10bd20cfc3c4c8b45710ab584a28d1c6086a50c47a6099ee9268518b09d6d11c09cfa0d7fc48c5fd0da9d5726ec890564c432074a8bc4c4721c34
- SSDEEP 98304:1hTwdwumUS9j35X5QtZNaDE55X9NQHxUHl7fJNy0LHn+7gfbF5+:uWU1ZNZ5X9NQHxUNby07Kgfj+
- TLSH T11A56AF03F26181E8C46EC578C35AA233EB72788E093472EB1BD45B252F66F906F1D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ruby-nokey.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ruby-nokey.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target ruby-nokey.exe
- Size 6.0MB
- SHA256 b2fb1a13a9c1cf78c419aacf5edebeb7a49901da64a0a9a739093e1919a78dc5
- MD5 c12a56694bacdea28199d979177d56c3
- SHA1 393d31d91f9029d57444e774909240b04bb10aec
- SHA512 f638c6ee65e10bd20cfc3c4c8b45710ab584a28d1c6086a50c47a6099ee9268518b09d6d11c09cfa0d7fc48c5fd0da9d5726ec890564c432074a8bc4c4721c34
- SSDEEP 98304:1hTwdwumUS9j35X5QtZNaDE55X9NQHxUHl7fJNy0LHn+7gfbF5+:uWU1ZNZ5X9NQHxUNby07Kgfj+
- TLSH T11A56AF03F26181E8C46EC578C35AA233EB72788E093472EB1BD45B252F66F906F1D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Checks whether UAC is enabled
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.