General

  • Target
    ruby-nokey.exe
  • Size 6.0MB
  • Sample261107-1anqsafv4x
  • SHA256 b2fb1a13a9c1cf78c419aacf5edebeb7a49901da64a0a9a739093e1919a78dc5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      ruby-nokey.exe
    • Size 6.0MB
    • SHA256 b2fb1a13a9c1cf78c419aacf5edebeb7a49901da64a0a9a739093e1919a78dc5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks whether UAC is enabled

    • Network Share Discovery

      Attempt to gather information on host network.

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

MITRE ATT&CK Enterprise v16

Tasks