MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 29758396d04a16e12b52f470a2d9986ae2b3fcc5b9d2c9318543c08ab2ac70a7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 29758396d04a16e12b52f470a2d9986ae2b3fcc5b9d2c9318543c08ab2ac70a7
SHA3-384 hash: 905d0ed10c1aa45d8ccce0af802fd4444ca8c73b4e7551a6e3c247fbcc73a3a71d78737c2028973ccb7dda9c0a1a3b59
SHA1 hash: 1ef588df823e8e0db753cb38fa6dc9ad00fc655b
MD5 hash: 456cd7ed73b3da798fd7e4231a93594d
humanhash: ceiling-lactose-xray-finch
File name:29758396d04a16e12b52f470a2d9986ae2b3fcc5b9d2c9318543c08ab2ac70a7
Download: download sample
File size:625'867 bytes
First seen:2020-06-07 11:25:27 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrrZT6yF8EEP4UlUuTh1AG:FBXmkN/+Fhu/Qo4h9L+zNNZBVEBl/91h
TLSH DED47D06F243EAF7C4970570124BF7BF4230E6318412DF8AB6889D5AB9379F52A4E356
telfhash 2e3162e118bc0c860de0ac145c7c3b82ca8b91771fa4961caf99cd89714f125f67bc06
Reporter parthdmaniar
Tags:linux malware


Avatar
parthmaniar
This malware (or malware artefact file) was first captured on my SSH honetpot.

Intelligence

File Origin
# of uploads :
1
# of downloads :
114
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Unix.Trojan.DDoS_XOR-1
Create hunting rule

Gathering data
Threat name:
Linux.Trojan.XorDDoS
Create hunting rule
Status:
Malicious
First seen:
2020-05-05 18:14:41 UTC
AV detection:
21 of 29 (72.41%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf 29758396d04a16e12b52f470a2d9986ae2b3fcc5b9d2c9318543c08ab2ac70a7

(this sample)

  
Link
https://www.virustotal.com/gui/file/29758396d04a16e12b52f470a2d9986ae2b3fcc5b9d2c9318543c08ab2ac70a7
  
URLhaus
https://urlhaus.abuse.ch/url/358440/
  
Delivery method
Distributed via web download
  
URLhaus
https://urlhaus.abuse.ch/url/362800/
  
URLhaus
https://urlhaus.abuse.ch/url/367570/
  
URLhaus
https://urlhaus.abuse.ch/url/367737/

Comments