Open-source atomic malware analysis

Analyze another

malware.rb

RUBY
Verdict: SUSPICIOUS
SHA256: be8ec1f14954e35f39c69b3b1a516eb41dc8831b9cc8bd4e3a6b18103c6ee62b
Mal-ecule
O₂(LaC)H(F₂)Md(Pa)
Size 2.1 KB download
First seen 117 days ago
Analyzed 116 days ago
Ecosystem malcontent-samples

Objectives

hostile severity, 95% confident.
lateral-movement/infection File infector virus spreads by injecting code into other files
component severity, 95% confident.
command-and-control/dropper/execution File rename operation

Micro-behaviors

notable severity, 95% confident.
fs/file Rename files (AST)
notable severity, 80% confident.
fs/read Self-reference via __FILE__

Metadata

component severity, 90% confident.
package File has 30 or more lines

Identity

SHA-256 be8ec1f14954e35f39c69b3b1a516eb41dc8831b9cc8bd4e3a6b18103c6ee62b
Filename malware.rb

Origin

Source harvest
Feed datasets
Ecosystem malcontent-samples

Timeline

First seen 24 Apr 2026 16:18 UTC
Last analyzed 26 Apr 2026 03:37 UTC
Last updated 26 Apr 2026 03:37 UTC

Labeling

Label bad
Label source harvest
Traits version bf48d