Classification: Malicious
spclisten is a trojan (Linux ELF executable, 7.3 MB). Detected by 34 antivirus engines. Linked to Brickstorm malware. 17 sightings, last seen 2026-06-08.
Detection summary
- 34 antivirus detections
- 0 IDS alerts
- 4 processes observed
- 0 contacted hosts
- 1 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Brickstorm |
Triage |
2026-06-08 12:29:24 |
2026-06-08 12:29:24 |
malicious-activity
|
S9015 BRICKSTORM
|
| Generic Malware |
Hybrid-Analysis |
2025-09-04 22:21:32 |
2025-09-05 01:21:39 |
|
|
Tags
evasive
brickstorm
unc5221
backdoor
discovery
linux
Sample information
- Filenames
- 2388ed7aee0b6b392778e8f9e98871c06499f476c9e7eae6ca0916f827fe65df.elf, spclisten
- File type
- ELF 64-bit LSB executable, x86-64, version 1 (SYSV ...
- Size
- 7606272 bytes
- MD5
123e80a34508c4dede7cc70e76931fcc- SHA-1
130fdc32de36a362e65c7138b560eb8d8f6ae599- SHA-256
2388ed7aee0b6b392778e8f9e98871c06499f476c9e7eae6ca0916f827fe65df- First indexed
- 2025-09-04 22:07:31
- Last updated
- 2026-09-17 01:12:42
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Backdoor.Linux.BrickStorm |
| AVG | ELF:Agent-DSK [Trj] |
| AhnLab-V3 | Backdoor/Linux.BrickStone |
| Arcabit | Trojan.Linux.BrickStorm.DE587 |
| Avast | ELF:Agent-DSK [Trj] |
| BitDefender | Trojan.Linux.BrickStorm.58759 |
| CTX | elf.trojan.brickstorm |
| ClamAV | Unix.Trojan.BRICKSTORM-10058784-1 |
| DrWeb | Linux.BackDoor.BrickStorm.2 |
| ESET-NOD32 | Linux/BrickStorm.A trojan |
| Emsisoft | Trojan.Linux.BrickStorm.58759 (B) |
| Fortinet | ELF/Agent.1FCC!tr |
| GData | Trojan.Linux.BrickStorm.58759 |
| Google | Detected |
| Ikarus | Trojan.SuspectCRC |
| Kaspersky | HEUR:Backdoor.Linux.Agent.gen |
| Lionic | Trojan.Linux.BrickStorm.4!c |
| McAfeeD | ti!2388ED7AEE0B |
| MicroWorld-eScan | Trojan.Linux.BrickStorm.58759 |
| Microsoft | Trojan:Linux/BrickStorm!MTB |
| Rising | Backdoor.Agent/Linux!8.133D0 (KTSE) |
| SentinelOne | Static AI - Malicious ELF |
| Skyhigh | LINUX/BrickStorm |
| Sophos | Linux/Brick-B |
| Symantec | Linux.Trojan |
| Tencent | Malware.Linux.Generic.1c03ffb1 |
| TrendMicro | Backdoor.Linux.BRICKSTORM.YAFJH |
| TrendMicro-HouseCall | Backdoor.Linux.BRICKSTORM.YAFJH |
| VIPRE | Trojan.Linux.BrickStorm.58759 |
| Varist | E64/ABTrojan.PLZK- |
| ViRobot | Backdoor.Linux.S.BrickStorm.7606272 |
| ZoneAlarm | Linux/Brick-B |
| alibabacloud | Backdoor:Linux/BrickStorm.A |
| huorong | Trojan/Generic!6615995977575830 |
Process list
| Name | Command line |
|---|
| spclisten | |
| spclisten | |
| spclisten | |
| spclisten | |