e9a7b43acdddc3d2101995a2e2072381449054a7d8d381e6dc6ed64153c9c96a.elf

Classification: Malicious

e9a7b43acdddc3d2101995a2e2072381449054a7d8d381e6dc6ed64153c9c96a.elf is a malicious file sample. Linked to Avoslocker malware.

Detection summary

  • 54 antivirus detections (55% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: AVOSLOCKER (S1053)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-01-08 16:00:03 2023-01-08 16:00:03
AvosLocker MalwareBazaar Abuse.ch 2022-03-25 18:59:28 2022-03-25 18:59:28 malicious-activity S1053 AvosLocker
Generic.Malware MalwareBazaar Abuse.ch 2022-03-25 18:59:28 2022-03-25 18:59:28 malicious-activity

Sample information

Filenames
e9a7b43acdddc3d2101995a2e2072381449054a7d8d381e6dc6ed64153c9c96a.elf, e9a7b43acdddc3d2101995a2e2072381449054a7d8d381e6dc6ed64153c9c96a
File type
application/x-executable
Size
1619392 bytes
MD5
afed45cd85a191fe3b2543e3ae6aa811
SHA-1
e8c26db068914df2083512ff8b24a2cc803ea498
SHA-256
e9a7b43acdddc3d2101995a2e2072381449054a7d8d381e6dc6ed64153c9c96a
First indexed
2022-03-25 20:15:06
Last updated
2026-04-04 10:51:59

Antivirus detections

EngineDetection
LionicTrojan.Linux.Agent.j!c
CynetMalicious (score: 99)
CAT-QuickHealELF.Trojan.46483.GC
ArcabitTrojan.Linux.Generic.D3A835
CyrenE64/DCAvoslckr.XPVB
ESET-NOD32a variant of Linux/Filecoder.AvosLocker.A
TrendMicro-HouseCallTROJ_FRS.0NA103E522
AvastELF:Filecoder-DG [Trj]
KasperskyHEUR:Trojan-Ransom.Linux.Agent.s
BitDefenderTrojan.Linux.Generic.239669
NANO-AntivirusTrojan.Elf64.Ransom.jnoyry
MicroWorld-eScanTrojan.Linux.Generic.239669
TencentLinux.Trojan.Agent.Lsmf
Ad-AwareTrojan.Linux.Generic.239669
EmsisoftTrojan.Linux.Generic.239669 (B)
DrWebLinux.Encoder.127
ZillyaTrojan.Filecoder.Linux.100
TrendMicroTROJ_FRS.0NA103E522
McAfee-GW-EditionLINUX/Avoslocker.a
FireEyeTrojan.Linux.Generic.239669
SophosLinux/Ransm-P
SentinelOneStatic AI - Suspicious ELF
GDataTrojan.Linux.Generic.239669
JiangminTrojan.Linux.buu
AviraLINUX/Encoder.ksxdm
MicrosoftRansom:Linux/AvosLocker.A!MTB
AhnLab-V3Ransomware/Linux.AvosLocker.1619392
ALYacTrojan.Ransom.Linux.Gen
MAXmalware (ai score=83)
RisingRansom.AvosLocker/Linux!8.13E8B (CLOUD)
IkarusTrojan-Ransom.AvosLocker
FortinetLinux/Filecoder_AvosLocker.A!tr
AVGELF:Filecoder-DG [Trj]
Antiy-AVLTrojan/Linux.Agent
ArcabitTrojan.Linux.Ransom.DB
BitDefenderTrojan.Linux.Ransom.DB
CTXelf.ransomware.avoslocker
ESET-NOD32Linux/Filecoder.AvosLocker.A trojan
EmsisoftTrojan.Linux.Ransom.DB (B)
F-SecureMalware.LINUX/Encoder.ksxdm
GDataTrojan.Linux.Ransom.DB
GoogleDetected
KingsoftLinux.Trojan-Ransom.Agent.s
LionicTrojan.Linux.Encoder.j!c
MicroWorld-eScanTrojan.Linux.Ransom.DB
RisingRansom.AvosLocker/Linux!8.13E8B (TFE:1B:lprRuErnySF)
SkyhighLINUX/Avoslocker.a
SymantecLinux.RansomAvos
TencentMalware.Linux.Generic.1c03d597
VIPRETrojan.Linux.Ransom.DB
VaristE64/DCAvoslckr.XPVB
ZoneAlarmLinux/Ransm-P
alibabacloudRansomWare
huorongRansom/Linux.LockFile.c

Process list

NameCommand line
e9a7b43acdddelf