History

qjerome ed31396fe8 add: [linux] sample info take 3		2024-07-02 12:45:46 +02:00
..
analysis	chg: reprocessed all logs to include dst_port in graphs	2024-06-27 23:01:31 +02:00
6ebf51d169240f1c233aaf49da07005eca3529ae4c9b19b9de78f906ad7527a6	repository re-org + sample analysis	2024-06-19 16:49:36 +02:00
README.md	add: [linux] sample info take 3	2024-07-02 12:45:46 +02:00
virustotal.json	add: [linux] virustotal detection reports	2024-07-02 11:05:19 +02:00

README.md

Sample Information

md5	3b580fa241f0f73f885ad9b364bef5e7
sha1	08534ff1a88547dd76c1948257ab7c78c2b7ab7e
sha256	6ebf51d169240f1c233aaf49da07005eca3529ae4c9b19b9de78f906ad7527a6
sha512	732b628b52e25eafc4f59b7372b8c9a258366b97d50385e64231a6616a61465581213ee02e9c3ac6284022e589e110dd3e3c16d9dd0572e64430bd9d5acb6477

VirusTotal: https://www.virustotal.com/gui/file/6ebf51d169240f1c233aaf49da07005eca3529ae4c9b19b9de78f906ad7527a6

Detection Names

Backdoor.Linux.Ganiw.H
Backdoor.Linux.Ganiw.H (B)
Backdoor/Linux.ii
Backdoor:Linux/Setag.A
Backdoor.Setag/Linux!1.A3E5 (CLASSIC)
Backdoor.Win32.S.Agent.1135000.U
Detected
Downloader.OpenConnection.JS.100251
E32/Setag.B
ELF:Elknot-AE [Trj]
ELF/Setag.B!tr
ELF_SETAG.SM
EXP/ELF.Backdoor.Setag.cc.e
Exploit.EXP/ELF.Backdoor.Setag.cc.e
HEUR:Backdoor.Linux.Ganiw.d
Legacy.Trojan.Agent-1388639
Linux/Agent.A
Linux/Backdoor.1135000
Linux.BackDoor.Gates.9
Linux.BackDoor.Gates.G
Linux.Chikdos.B!gen2
Linux/DDoS-BD
Linux/Setag.B.Gen
Linux.Trojan.Ganiw
Linux.Trojan.Siggen.D
Malicious (score: 99)
Malware@#2hph1ko0peawr
malware (ai score=100)
Static AI - Malicious ELF
Trojan.Elf32.Ganiw.dirahp
Trojan.Linux.Agent
Trojan.Linux.Elknot.atAE
Trojan.Linux.Ganiw.a
Trojan.Malware.121218.susgen
Trojan/Win32.PowerGhost.a