Open-source atomic malware analysis

Analyze another

connect.rb

RUBY
Verdict: HOSTILE
SHA256: a7a47a2983f0132da079612d378a37ca41c7279dad3611e6df69fe37c97db98f
Mal-ecule
O(C₂)H₃(CmOsPo)Md
Size 774 B download
First seen 117 days ago
Analyzed 105 days ago
Ecosystem malcontent-samples

Objectives

suspicious severity, 92% confident.
command-and-control/remote-command PHP exec function in URL

Micro-behaviors

notable severity, 75% confident.
os/console STDIN input normalization for interactive shell
notable severity, 95% confident.
process/create/shell system() executes command
baseline severity, 100% confident.
data/text/malware backdoor keyword

Metadata

baseline severity, 95% confident.
import imports open-uri
component severity, 90% confident.
file/text File has 30 or more lines

Identity

SHA-256 a7a47a2983f0132da079612d378a37ca41c7279dad3611e6df69fe37c97db98f
Filename connect.rb

Origin

Source harvest
Feed datasets
Ecosystem malcontent-samples

Timeline

First seen 24 Apr 2026 16:18 UTC
Last analyzed 6 May 2026 09:46 UTC
Last updated 6 May 2026 09:53 UTC

Labeling

Label bad
Label source harvest
Traits version db300