2025-12-13_6e5231ba10d4c2fd53787d2887acbe9d_bpfdoor_helldown.elf

Classification: Malicious

2025-12-13_6e5231ba10d4c2fd53787d2887acbe9d_bpfdoor_helldown.elf is a malicious file sample. Linked to Bpfdoor malware. Detected by 33 antivirus engines.

Detection summary

  • 33 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: BPFDOOR (S1161)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Bpfdoor Triage 2026-03-28 08:29:14 2026-03-28 08:29:14 malicious-activity S1161 BPFDoor

Tags

bpfdoor linux

Sample information

Filenames
2025-12-13_6e5231ba10d4c2fd53787d2887acbe9d_bpfdoor_helldown.elf
SHA-256
1f4bde6295973e54ca0bb67c532095559bed024186219d8d0b4323b9750d82f2
First indexed
2026-03-28 08:29:14
Last updated
2026-06-23 00:27:27

Antivirus detections

EngineDetection
ALYacBackdoor.Linux.BPFDoor
AVGELF:BPFdoor-A [Trj]
AhnLab-V3Trojan/Linux.Agent
Antiy-AVLTrojan[Backdoor]/Linux.BpfDoor
ArcabitTrojan.Linux.BpfDoor.52
AvastELF:BPFdoor-A [Trj]
BitDefenderTrojan.Linux.BpfDoor.52
CTXelf.trojan.bpfdoor
DrWebLinux.BackDoor.Siggen.687
ESET-NOD32Linux/BpfDoor.E trojan
ElasticLinux.Trojan.BPFDoor
EmsisoftTrojan.Linux.BpfDoor.52 (B)
FortinetLinux/BpfDoor.E!tr
GDataTrojan.Linux.BpfDoor.52
GoogleDetected
KasperskyHEUR:Backdoor.Linux.Bpfdoor.a
KingsoftLinux.Backdoor.Bpfdoor.a
LionicTrojan.Linux.BpfDoor.m!c
McAfeeDti!1F4BDE629597
MicroWorld-eScanTrojan.Linux.BpfDoor.52
MicrosoftBackdoor:Linux/BPFDoor.F!MTB
RisingBackdoor.Bpfdoor/Linux!8.19944 (TFE:1B:1X8Zoi1gdBB)
SentinelOneStatic AI - Malicious ELF
SkyhighLINUX/Agent.ei
SophosLinux/BpfDoor-A
SymantecTrojan Horse
TencentMalware.Linux.Generic.1c043f05
TrendMicro-HouseCallTrojan.Win32.ZYX.USBLEP26
VIPRETrojan.Linux.BpfDoor.52
VaristE64/ABTrojan.SFCV-
ZoneAlarmLinux/BpfDoor-A
alibabacloudBackdoor:Linux/BpfDoor.E
huorongTrojan/Generic!2F2EA559B6BBBD46