History

qjerome 99b759ba3a add: [linux] sample info take 4		2024-07-02 13:19:50 +02:00
..
analysis	chg: reprocessed all logs to include dst_port in graphs	2024-06-27 23:01:31 +02:00
9e70725640c4284e2049e4b25c9cc46cca496053cebf69855ec25acc9bd63e05	New samples from malware bazaar	2024-06-24 14:50:22 +02:00
README.md	add: [linux] sample info take 4	2024-07-02 13:19:50 +02:00
virustotal.json	add: [linux] virustotal detection reports	2024-07-02 11:05:19 +02:00

README.md

Sample Information

VirusTotal Threat Label	"trojan.expl/genericrxtd"
md5	85ed1956d405087848be7cbeded6c7e2
sha1	e47fa415628cccca044e4f65f125be9a0b8d4ccf
sha256	9e70725640c4284e2049e4b25c9cc46cca496053cebf69855ec25acc9bd63e05
sha512	80c13bee730b1581d83eaef054e4f002a25a8f41ba848237f3b933a2f3530d4086833eef4a61ca41c54b01d8b10d2c0365081ef18175db5fd8acb2cf67c86130

VirusTotal: https://www.virustotal.com/gui/file/9e70725640c4284e2049e4b25c9cc46cca496053cebf69855ec25acc9bd63e05

Detection Names

Backdoor[shellcode]:Linux/fackexp.A
Detected
E64/Agent.OF
ELF:Agent-BIN [Expl]
ELF/TrojanGen.A
EXP/AVI.Agent.ocayj
Exploit.Agent
Exploit.Agent/Linux!1.FD49 (CLASSIC)
Exploit.EXP/AVI.Agent.ocayj
GenericRXTD-TM!85ED1956D405
HEUR:Trojan-Dropper.Linux.Agent.l
Linux/Exploit.Agent.GU
Linux.MulDrop.85
Linux.Trojan-Dropper.Agent.l
Linux.Trojan-Dropper.Agent.Tnkl
Malicious (score: 99)
TrojanDropper.Linux.ed
Trojan[Exploit]/Linux.Agent.gen
Trojan.Generic.36318000
Trojan.Generic.36318000 (B)
Trojan.Generic.D22A2B30
Trojan.Gen.NPE
Trojan.Linux.Agent.b!c
Trojan:Linux/Multiverze
TROJ_GEN.R002C0DFD24