Open-source atomic malware analysis

Analyze another

pastebin.rb

RUBY
Verdict: HOSTILE
SHA256: ea303d79d60e1df31450e7009990c72971fc257139d89d15cea058b15d2c1ad5
Mal-ecule
O₄(As₃CaCXe)H₂(CmDb₂)Md(Pa)
Size 2.1 KB download
First seen 118 days ago
Analyzed 118 days ago
Ecosystem malcontent-samples

Objectives

hostile severity, 95% confident.
anti-static/obfuscation eval + Base64.decode64 (Ruby payload execution)
suspicious severity, 85% confident.
credential-access/theft Credential string construction
notable severity, 80% confident.
command-and-control Cookie session extraction
notable severity, 90% confident.
execution/interpreter/eval Ruby eval call

Micro-behaviors

notable severity, 85% confident.
communications/http Net::HTTP POST request
notable severity, 90% confident.
data/decode Ruby urlsafe Base64 decode
baseline severity, 75% confident.
communications Hardcoded localhost network host
baseline severity, 85% confident.
crypto Digital signature verification
baseline severity, 100% confident.
data/source/quality Uses Base64 module

Metadata

baseline severity, 95% confident.
import imports openssl
component severity, 90% confident.
package File has 30 or more lines

Identity

SHA-256 ea303d79d60e1df31450e7009990c72971fc257139d89d15cea058b15d2c1ad5
Filename pastebin.rb

Origin

Source harvest
Feed datasets
Ecosystem malcontent-samples

Timeline

First seen 24 Apr 2026 16:18 UTC
Last analyzed 24 Apr 2026 20:40 UTC
Last updated 24 Apr 2026 20:40 UTC

Labeling

Label bad
Label source harvest
Traits version 8bf61