History

qjerome 99b759ba3a add: [linux] sample info take 4		2024-07-02 13:19:50 +02:00
..
analysis	chg: reprocessed all logs to include dst_port in graphs	2024-06-27 23:01:31 +02:00
e27571a89dfbb256bdf2aa7ff0a062bd10bd712c46d7ddc045a8ac85c4903c2f	repository re-org + sample analysis	2024-06-19 16:49:36 +02:00
README.md	add: [linux] sample info take 4	2024-07-02 13:19:50 +02:00
virustotal.json	add: [linux] virustotal detection reports	2024-07-02 11:05:19 +02:00

README.md

Sample Information

VirusTotal Threat Label	"unknown"
md5	e97790c1200e6d5c8f4eed64f1736a5d
sha1	8df8579b3303221b0aa9955f0e11ab6d24525a1a
sha256	e27571a89dfbb256bdf2aa7ff0a062bd10bd712c46d7ddc045a8ac85c4903c2f
sha512	0cb76a4ac2c5787282f31bed1a0a2599258d85890d60cc6a1538548f304b56668840295b99d862a721baa3309e7dc3366b2dbd2819ed39900cc2165dc23a7f70

VirusTotal: https://www.virustotal.com/gui/file/e27571a89dfbb256bdf2aa7ff0a062bd10bd712c46d7ddc045a8ac85c4903c2f

Detection Names

Backdoor.Linux.Ganiw.a
Backdoor.Linux.Ganiw.H
Backdoor.Linux.Ganiw.H (B)
Backdoor/Linux.ii
Backdoor:Linux/Setag.A
Backdoor.Setag/Linux!1.A3E5 (CLASSIC)
Detected
Downloader.OpenConnection.JS.100251
E32/Setag.B
ELF:Elknot-AE [Trj]
ELF/Setag.B!tr
ELF_SETAG.SM
HEUR:Backdoor.Linux.Ganiw.d
Legacy.Trojan.Agent-1388639
Linux/Agent.A
Linux/Backdoor.1135000
Linux.BackDoor.Gates.9
Linux.BackDoor.Gates.G
Linux.Chikdos.B!gen2
Linux/DDoS-BD
LINUX/Setag.axyb
Linux/Setag.B.Gen
Linux.Trojan.Ganiw
Linux.Trojan.Siggen.D
Malicious (score: 99)
Malware@#3xsifarbkt6j
malware (ai score=100)
Malware.LINUX/Setag.axyb
Script.Ks.Malware.14758
Static AI - Malicious ELF
Trojan.Elf32.Ganiw.dirahp
Trojan.Linux.Agent
Trojan.Linux.Elknot.atAE
Trojan.Linux.Ganiw.a
Trojan.Malware.121218.susgen
Trojan.U.Gen.tr
Trojan/Win32.PowerGhost.a