dbus_socket.elf
Classification: Malicious
dbus_socket.elf is a malicious file sample. Linked to Bpfdoor malware. Reported by 1 threat source, last seen 2026-04-25. Detected by 39 antivirus engines.
Detection summary
- 39 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: BPFDOOR (S1161)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Bpfdoor | Triage | 2026-04-25 22:08:10 | 2026-04-25 22:08:10 | malicious-activity | S1161 BPFDoor |
Tags
bpfdoor backdoor defense_evasion discovery linuxSample information
- Filenames
- dbus_socket.elf
- SHA-256
de472ed37e33b79e1aa37e67a680ee3a9d74628438c209543a06e916a0a86fba- First indexed
- 2026-04-25 22:08:10
- Last updated
- 2026-07-16 01:18:43
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Backdoor.Linux.BPFDoor |
| AVG | Other:Malware-gen [Trj] |
| AhnLab-V3 | Backdoor/Linux.BPFDoor.23632 |
| Arcabit | Trojan.Linux.BpfDoor.2 |
| Avast | Other:Malware-gen [Trj] |
| Avira | TR/Malware |
| BitDefender | Trojan.Linux.BpfDoor.2 |
| CTX | elf.backdoor.bpfdoor |
| Cynet | Malicious (score: 99) |
| DrWeb | Linux.BPFDoor.7 |
| ESET-NOD32 | Linux/BpfDoor.B trojan |
| Elastic | Linux.Trojan.BPFDoor |
| Emsisoft | Trojan.Linux.BpfDoor.2 (B) |
| F-Secure | Trojan.TR/Malware |
| Fortinet | Linux/BpfDoor.B!tr |
| GData | Trojan.Linux.BpfDoor.2 |
| Detected | |
| K7GW | Trojan ( 0040f0491 ) |
| Kaspersky | HEUR:Backdoor.Linux.Agent.dm |
| Lionic | Trojan.Linux.BpfDoor.m!c |
| McAfeeD | ti!DE472ED37E33 |
| MicroWorld-eScan | Trojan.Linux.BpfDoor.2 |
| Panda | ELF/TrojanGen.A |
| Rising | Backdoor.Agent/Linux!8.133D0 (KTSE) |
| Sangfor | Suspicious.Linux.Save.a |
| SentinelOne | Static AI - Malicious ELF |
| Skyhigh | LINUX/Agent.ei |
| Sophos | Linux/Agnt-HV |
| Symantec | Trojan.Gen.NPE |
| Tencent | Malware.Linux.Generic.1c040454 |
| TrendMicro | Backdoor.Linux.BPFDOOR.G |
| TrendMicro-HouseCall | Backdoor.Linux.BPFDOOR.G |
| VBA32 | Backdoor.Linux.Agent |
| VIPRE | Trojan.Linux.BpfDoor.2 |
| Varist | E64/ABBackdoor.YCPI |
| ViRobot | Backdoor.Linux.S.BPFDoor.23632 |
| ZoneAlarm | Linux/Agnt-HV |
| alibabacloud | Backdoor:Linux/BpfDoor.B |
| huorong | Trojan/Generic!D56C9BB659A3FB74 |