Classification: Malicious
rondo.x86_64 is a trojan (Linux ELF executable). Detected by 28 antivirus engines. 49 sightings from MalwareBazaar Abuse.ch and Triage, last seen 2026-02-19.
Detection summary
- 28 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Rondodox |
Triage |
2026-02-19 12:47:47 |
2026-02-19 12:47:47 |
malicious-activity
|
|
| Generic.Malware |
MalwareBazaar Abuse.ch |
2026-01-17 08:29:07 |
2026-01-17 08:29:07 |
malicious-activity
|
|
| RondoDox |
MalwareBazaar Abuse.ch |
2026-01-17 08:29:07 |
2026-01-17 08:29:07 |
malicious-activity
|
|
Sample information
- Filenames
- 7aeb450c57b466d9a280a02f5bbdb2166d6b092a5a6aa7a440b854cc2af333b5, rondo.x86_64
- File type
- elf
- MD5
8e79702cf2030a7cf8efbf92191ecb82- SHA-1
a292891f75e05f1a12df1b93f5430e0f08750c04- SHA-256
7aeb450c57b466d9a280a02f5bbdb2166d6b092a5a6aa7a440b854cc2af333b5- SHA-512
c7adec60a22ffc1cd7dabf3a8514a38b66c7c108889abc7dda767ea70da1d0fa204b83c53c2f86c8329043a8bc4ae230387e0f436827fc7796a9445d70bfcc48- First indexed
- 2026-01-17 08:29:07
- Last updated
- 2026-03-20 16:04:03
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Trojan.Linux.GenericKD.69036 |
| AVG | ELF:Mirai-DCL [Trj] |
| Arcabit | Trojan.Linux.Generic.D10DAC |
| Avast | ELF:Mirai-DCL [Trj] |
| BitDefender | Trojan.Linux.GenericKD.69036 |
| CTX | elf.trojan.mirai |
| ClamAV | Unix.Trojan.Mirai-7640640-0 |
| Cynet | Malicious (score: 99) |
| ESET-NOD32 | Linux/Mirai.EIZ trojan |
| Elastic | Linux.Trojan.Gafgyt |
| Emsisoft | Trojan.Linux.GenericKD.69036 (B) |
| Fortinet | Linux/Mirai.EIZ!tr |
| GData | Trojan.Linux.GenericKD.69036 |
| Google | Detected |
| Ikarus | LINUX.Agent |
| Kaspersky | HEUR:Backdoor.Linux.Mirai.gen |
| Lionic | Trojan.Linux.Mirai.K!c |
| MicroWorld-eScan | Trojan.Linux.GenericKD.69036 |
| Microsoft | Trojan:Linux/Multiverze!rfn |
| SentinelOne | Static AI - Malicious ELF |
| Sophos | Mal/Generic-S |
| Symantec | Linux.Mirai |
| Tencent | Malware.Linux.Generic.1c0455a0 |
| TrendMicro-HouseCall | TROJ_GEN.R06EH09AJ26 |
| VIPRE | Trojan.Linux.GenericKD.69036 |
| Varist | E64/Agent.BN.gen!Eldorado |
| alibabacloud | DDoS:Linux/Mirai.ELP |
| huorong | Trojan/Linux.Mirai.fu |