Open-source atomic malware analysis

Analyze another

rcs 2.0.16.pre.rc.3

TAR
Verdict: SUSPICIOUS
SHA256: 8311d37e3c7631e80f3685a728f98822dcfec18be7a3e7fb32c4f37586c082c5
Mal-ecule
O₇(C₄S₅As₃DyEr₆La₂P)H₄(Cm₄OsCrDb₃)Md(Pa)
Size 114.5 KB download
First seen 112 days ago
Analyzed 111 days ago
Package pkg:gem/[email protected]
Ecosystem ruby
Source rubygems.org

Objectives

suspicious severity, 85% confident.
command-and-control RSA public key embedded
suspicious severity, 90% confident.
supply-chain/metadata-anomaly Remote binary (exe/sh/rb)

Micro-behaviors

notable severity, 86% confident.
communications/http OAuth client credential fields
notable severity, 85% confident.
communications/http/lib Net::HTTP get request
notable severity, 75% confident.
os/console STDIN input normalization for interactive shell

Metadata

baseline severity, 95% confident.
import imports uri
baseline severity, 95% confident.
import/ruby::net imports net/http
baseline severity, 95% confident.
import/ruby::pinnacle imports pinnacle/environment
baseline severity, 95% confident.
import/ruby::pinnacle/audiences imports pinnacle/audiences/client
baseline severity, 95% confident.
import/ruby::pinnacle/audiences/contacts imports pinnacle/audiences/contacts/client
baseline severity, 95% confident.
import/ruby::pinnacle/audiences/contacts/types imports pinnacle/audiences/contacts/types/add_contacts_params
baseline severity, 95% confident.
import/ruby::pinnacle/audiences/types imports pinnacle/audiences/types/update_audience_params
baseline severity, 95% confident.
import/ruby::pinnacle/brands imports pinnacle/brands/client
baseline severity, 95% confident.
import/ruby::pinnacle/brands/types imports pinnacle/brands/types/autofill_brand_params
baseline severity, 95% confident.
import/ruby::pinnacle/campaigns imports pinnacle/campaigns/client
baseline severity, 95% confident.
import/ruby::pinnacle/campaigns/dlc imports pinnacle/campaigns/dlc/client
baseline severity, 95% confident.
import/ruby::pinnacle/campaigns/dlc/types imports pinnacle/campaigns/dlc/types/list_dlc_campaigns_request_status
baseline severity, 95% confident.
import/ruby::pinnacle/campaigns/rcs imports pinnacle/campaigns/rcs/client
baseline severity, 95% confident.
import/ruby::pinnacle/campaigns/rcs/types imports pinnacle/campaigns/rcs/types/rcs_use_case
baseline severity, 98% confident.
package::rubygem-archive Rubygem internal archive structure file

20 of 100 traits shown

Identity

SHA-256 8311d37e3c7631e80f3685a728f98822dcfec18be7a3e7fb32c4f37586c082c5
Canonical SHA-256 014c2f7eba348a1d8f69bef08679f4aa35e443bed4009882dfe2098fbb35eb7d
Filename rcs-2.0.16.pre.rc.3.gem
Package rcs
Version 2.0.16.pre.rc.3
PURL pkg:gem/[email protected]

Origin

Source harvest
Feed rubygems.org
Ecosystem ruby
Domain rubygems.org

Timeline

First seen 3 May 2026 22:42 UTC
Last analyzed 4 May 2026 22:38 UTC
Last updated 4 May 2026 22:38 UTC

Labeling

Label unknown
Label source harvest
Traits version 27ac5