95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7

Classification: Malicious

95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7 is a ransomware (application/x-executable, 1.5 MB). Linked to Conti malware.

Detection summary

  • 78 antivirus detections (61% detection ratio)
  • 0 IDS alerts
  • 3 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CONTI (S0575)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-07-06 21:30:05 2023-07-06 21:30:05
Conti MalwareBazaar Abuse.ch 2022-04-20 10:43:36 2022-04-20 10:43:36 malicious-activity S0575 Conti
Generic.Malware MalwareBazaar Abuse.ch 2022-04-20 10:43:36 2022-04-20 10:43:36 malicious-activity

Tags

backdoor locker ransomware

Sample information

Filenames
95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7.elf, 95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7
File type
application/x-executable
Size
1529773 bytes
MD5
cfb6d21ffe7c4279f761f2351c0810ee
SHA-1
ee827023780964574f28c6ba333d800b73eae5c4
SHA-256
95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7
First indexed
2022-04-20 11:15:03
Last updated
2026-07-20 01:06:38

Antivirus detections

EngineDetection
CAT-QuickHealELF.Trojan.46492.GC
ALYacTrojan.Ransom.Linux.Gen
K7AntiVirusTrojan ( 0001140e1 )
K7GWTrojan ( 0001140e1 )
CyrenE64/DCFilcdr.RTEK-
SymantecRansom.Conti
ESET-NOD32Linux/Filecoder.Conti.A
TrendMicro-HouseCallRansom.Linux.CONTI.YPCDV
AvastELF:Filecoder-DO [Trj]
CynetMalicious (score: 99)
KasperskyHEUR:Trojan-Ransom.Linux.Conti.gen
BitDefenderGen:Variant.Ransomware.Linux.Conti.1
NANO-AntivirusTrojan.Elf64.Ransom.jrwwuy
MicroWorld-eScanGen:Variant.Ransomware.Linux.Conti.1
RisingRansom.Conti/Linux!8.15360 (CLOUD)
EmsisoftGen:Variant.Ransomware.Linux.Conti.1 (B)
F-SecureMalware.LINUX/Filecoder.jxcsf
DrWebLinux.Encoder.135
VIPREGen:Variant.Ransomware.Linux.Conti.1
TrendMicroRansom.Linux.CONTI.YPCDV
McAfee-GW-EditionGenericRXVD-EC!CFB6D21FFE7C
FireEyeGen:Variant.Ransomware.Linux.Conti.1
SophosLinux/Ransm-AD
IkarusTrojan-Ransom.Conti
GDataGen:Variant.Ransomware.Linux.Conti.1
JiangminTrojan.Linux.cdx
AviraLINUX/Filecoder.jxcsf
MAXmalware (ai score=100)
Antiy-AVLTrojan[Ransom]/Linux.Conti.a
MicrosoftRansom:Linux/Conti.A
ArcabitTrojan.Ransomware.Linux.Conti.1
ZoneAlarmHEUR:Trojan-Ransom.Linux.Conti.gen
GoogleDetected
AhnLab-V3Ransomware/Linux.Conti.1529773
McAfeeGenericRXVD-EC!CFB6D21FFE7C
TencentLinux.Trojan-Ransom.Conti.Fkjl
FortinetELF/Conti.8284!tr.ransom
AVGELF:Filecoder-DO [Trj]
MicroWorld-eScanTrojan.Linux.Generic.249008
ALYacTrojan.Linux.Generic.249008
TrendMicro-HouseCallTROJ_GEN.R002H09D822
BitDefenderTrojan.Linux.Generic.249008
Ad-AwareTrojan.Linux.Generic.249008
EmsisoftTrojan.Linux.Generic.249008 (B)
McAfee-GW-EditionArtemis!Trojan
FireEyeTrojan.Linux.Generic.249008
GDataTrojan.Linux.Generic.249008
ArcabitTrojan.Linux.Generic.D3CCB0
MAXmalware (ai score=81)
AhnLab-V3Ransomware/Linux.Conti
ArcabitTrojan.Generic.D2457708
BitDefenderTrojan.Generic.38106888
CTXelf.ransomware.conti
ElasticLinux.Ransomware.Conti
EmsisoftTrojan.Generic.38106888 (B)
GDataTrojan.Generic.38106888
LionicTrojan.Linux.Conti.j!c
MicroWorld-eScanTrojan.Generic.38106888
RisingRansom.Conti/Linux!8.15360 (TFE:14:pUQsS2CGxtQ)
SentinelOneStatic AI - Suspicious ELF
SkyhighGenericRXVD-EC!CFB6D21FFE7C
SymantecTrojan Horse
TencentRansom.Linux.Conti.a
TrellixENSGenericRXVD-EC!CFB6D21FFE7C
VIPRETrojan.Generic.38106888
VaristE64/DCFilcdr.RTEK-
ZoneAlarmLinux/Ransm-AD
alibabacloudRansomWare
huorongRansom/Linux.LockFile.c
Antiy-AVLTrojan[Ransom]/Linux.Conti
ArcabitTrojan.Linux.Ransom.FH
BitDefenderTrojan.Linux.Ransom.FH
ESET-NOD32Linux/Filecoder.Conti.A trojan
EmsisoftTrojan.Linux.Ransom.FH (B)
GDataTrojan.Linux.Ransom.FH
McAfeeDti!95776F31CBCA
MicroWorld-eScanTrojan.Linux.Ransom.FH
VIPRETrojan.Linux.Ransom.FH

Process list

NameCommand line
95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7.elf/home/ubuntu/95776f31cbcac08eb3f3e9235d07513a6d7a6bf9f1b7f3d400b2cf0afdb088a7.elf
sudo/usr/bin/sudo
timeout/usr/bin/timeout