History

qjerome 9f13e5caa6 attempt with clickable link		2024-07-02 15:17:50 +02:00
..
analysis	chg: reprocessed all logs to include dst_port in graphs	2024-06-27 23:01:31 +02:00
6420f5d7d48b75d687b8356e93c82721bb536c633d773f8985f74c8977425f04	repository re-org + sample analysis	2024-06-19 16:49:36 +02:00
README.md	attempt with clickable link	2024-07-02 15:17:50 +02:00
virustotal.json	sample-doc-attempt	2024-07-02 11:41:17 +00:00

README.md

Sample Information

VirusTotal Threat Label	trojan.cornelgen/expl
md5	e62089b51f3b485b891359accdb11bdc
sha1	acbe528883175ce934df4edd4fff045a0e2d2d8f
sha256	6420f5d7d48b75d687b8356e93c82721bb536c633d773f8985f74c8977425f04
sha512	7bea4517cfbc816db778296f17c414cf93da4182c014678e214685733fd275401893344277f2d826965c4908c77c1136d53f6a76ff0e3b5d2250c19be9ccaf50

VirusTotal: https://www.virustotal.com/gui/file/6420f5d7d48b75d687b8356e93c82721bb536c633d773f8985f74c8977425f04

Analysis

Detection Names

Artemis!Trojan
Detected
ELF:CVE-2010-3081-E [Expl]
ELF_EXPLOYT.LL
EXP/CVE-2010-3081.B
Exp:Linux/CVE.2010.3081
Exploit.Agent!8.1B (TFE:14:90c1BLtlaUT)
Exploit.Agent.Linux.4
Exploit.Elf32.CVE20103081.dxkfls
Exploit.EXP/CVE-2010-3081.B
Exploit.Linux.ahn
Exploit:Linux/CVE-2010-3081.A!MTB
Exploit.MS04.CVE-2004-0210-2010-3081.B
Hacktool.Linux.Agent.3!c
HEUR:Exploit.Linux.Agent.a
Linux.CornelGEN.1714
Linux.CornelGEN.1714 (B)
Linux.CornelGEN.D6B2
Linux/Exploit.Agent.AY
Linux.Exploit.Agent.Qgil
Linux.Exploit.CVE-2010-3081.1
Malicious (score: 99)
Malware@#57nwy1j6aalm
malware (ai score=96)
Static AI - Suspicious ELF
Trojan[Exploit]/Linux.Agent.a
Trojan.Gen.NPE
Unix.Malware.Agent-7437248-0