bounty-30191403276680668

Classification: Malicious

bounty-30191403276680668 is a trojan (Linux ELF executable, 33.9 KB). Flagged by 55% of antivirus engines (52 detections).

Detection summary

  • 52 antivirus detections (55% detection ratio)
  • 0 IDS alerts
  • 3 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: LAZARUS GROUP (G0032) KIMSUKY (G0094)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Kimsuky MalwarePatrol 2026-03-03 18:13:46 2026-03-03 18:13:46 malicious-activity G0094 Kimsuky
Generic Malware Hybrid-Analysis 2023-06-05 21:45:04 2023-06-05 21:45:04
Lazarus Group Maltiverse 2023-04-27 04:27:30 2023-04-28 14:38:31 malicious-activity G0032 Lazarus Group

Tags

apt kimsuky operation stolen pencil sparkling pisces black banshee thallium velvet chollima g0086

Sample information

Filenames
bounty-30191403276680668
File type
ELF 64-bit LSB executable, x86-64, version 1 (SYSV ...
Size
34726 bytes
MD5
aac5a52b939f3fe792726a13ff7a1747
SHA-1
f6760fb1f8b019af2304ea6410001b63a1809f1d
SHA-256
cc307cfb401d1ae616445e78b610ab72e1c7fb49b298ea003dd26ea80372089a
First indexed
2023-04-28 14:38:31
Last updated
2026-03-10 04:30:10

Antivirus detections

EngineDetection
LionicTrojan.Linux.Agent.4!c
MicroWorld-eScanTrojan.Linux.Generic.293840
FireEyeTrojan.Linux.Generic.293840
CAT-QuickHealElf.Trojan.A7585256
ArcabitTrojan.Linux.Generic.D47BD0
CyrenE64/Agent.EM
SymantecTrojan.Proxabop
ESET-NOD32Linux/NukeSped.G
TrendMicro-HouseCallTROJ_GEN.R002C0OBA23
AvastELF:Vgauth-A [Trj]
KasperskyHEUR:Trojan.Linux.Agent.gen
BitDefenderTrojan.Linux.Generic.293840
TencentLinux.Trojan.Agent.Lcnw
EmsisoftTrojan.Linux.Generic.293840 (B)
F-SecureMalware.LINUX/Agent.dhgjy
DrWebLinux.BackDoor.Siggen.412
VIPRETrojan.Linux.Generic.293840
TrendMicroTROJ_GEN.R002C0OBA23
McAfee-GW-EditionArtemis
SophosLinux/NukeSpe-Z
GoogleDetected
AviraLINUX/Agent.dhgjy
Antiy-AVLTrojan/Linux.Agent.tw
MicrosoftTrojan:Linux/Multiverze
ZoneAlarmHEUR:Trojan.Linux.Agent.gen
GDataTrojan.Linux.Generic.293840
CynetMalicious (score: 99)
AhnLab-V3Trojan/Linux.Agent
ALYacTrojan.Linux.Nukesped
MAXmalware (ai score=84)
RisingTrojan.Agent/Linux!8.13268 (CLOUD)
IkarusTrojan.Linux.Nukesped
FortinetW32/Agent.TW!tr
AVGELF:Vgauth-A [Trj]
ArcabitTrojan.Generic.D258CFE1
BitDefenderTrojan.Generic.39374817
CTXelf.trojan.nukesped
ESET-NOD32Linux/NukeSped.G trojan
EmsisoftTrojan.Generic.39374817 (B)
GDataTrojan.Generic.39374817
K7GWTrojan ( 0040f4d21 )
LionicTrojan.Linux.NukeSped.4!c
MicroWorld-eScanTrojan.Generic.39374817
RisingTrojan.NukeSped/Linux!8.1530C (KTSE)
SkyhighLINUX/Agent.cx
TencentMalware.Linux.Generic.1c041b9c
VIPRETrojan.Generic.39374817
VaristE64/Agent.EM
ViRobotBackdoor.Linux.S.NukeSped.34726
ZoneAlarmLinux/NukeSpe-Z
alibabacloudTrojan:Linux/NukeSped.G
huorongTrojan/Generic!6C143154D067449B

Process list

NameCommand line
bounty-30191403276680668/home/ubuntu/bounty-30191403276680668
timeout/usr/bin/timeout
sudo/usr/bin/sudo