ed768dd922742a597257ad684820d7562bb6be215710ec614bd041a22f3d6863
Classification: Malicious
ed768dd922742a597257ad684820d7562bb6be215710ec614bd041a22f3d6863 is a trojan (Linux ELF executable). Detected by 26 antivirus engines.
Detection summary
- 26 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: BPFDOOR (S1161)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Cyber Threat Alliance | 2026-10-01 10:00:38 | 2026-10-10 10:10:04 | malicious-activity | |
| Generic Malware | Hybrid-Analysis | 2026-03-28 08:45:03 | 2026-03-28 10:45:08 | ||
| Bpfdoor | Triage | 2026-03-28 08:32:55 | 2026-03-28 08:32:55 | malicious-activity | S1161 BPFDoor |
Tags
bpfdoor linuxSample information
- Filenames
- ed768dd922742a597257ad684820d7562bb6be215710ec614bd041a22f3d6863.bin, ed768dd922742a597257ad684820d7562bb6be215710ec614bd041a22f3d6863.elf
- File type
- ELF 64-bit LSB executable, x86-64, version 1 (SYSV ...
- MD5
0e5c58b8f109c5cf68fad6a9a8b50790- SHA-1
8414e6dccc0d3fcf027c9f092697b8b55c11ee03- SHA-256
ed768dd922742a597257ad684820d7562bb6be215710ec614bd041a22f3d6863- First indexed
- 2026-03-28 08:32:55
- Last updated
- 2026-08-04 07:25:20
Antivirus detections
| Engine | Detection |
|---|---|
| AhnLab-V3 | Backdoor/Linux.BPFDoor |
| Arcabit | Trojan.GenericS.D1184 |
| Avast-Mobile | ELF:Agent-BNJ [Trj] |
| BitDefender | Trojan.GenericS.4484 |
| CTX | elf.backdoor.bpfdoor |
| Cynet | Malicious (score: 99) |
| DrWeb | Linux.BackDoor.BPFDoor.16 |
| ESET-NOD32 | Linux/Agent.YZ trojan |
| Emsisoft | Trojan.GenericS.4484 (B) |
| Fortinet | Linux/Agent.YZ!tr |
| GData | Trojan.GenericS.4484 |
| Ikarus | Trojan.Linux.Agent |
| K7GW | Trojan ( 004104991 ) |
| Lionic | Trojan.Linux.BPFDoor.m!c |
| MicroWorld-eScan | Trojan.GenericS.4484 |
| Microsoft | Trojan:Linux/SAgnt!MTB |
| Rising | Backdoor.BPFdoor/Linux!8.1BB99 (CLOUD) |
| SentinelOne | Static AI - Malicious ELF |
| Symantec | Trojan Horse |
| Tencent | Backdoor.Linux.Bfdoor.a |
| TrendMicro-HouseCall | Backdoor.Linux.BPFDOOR.F |
| VBA32 | Backdoor.Linux.Agent |
| VIPRE | Trojan.GenericS.4484 |
| ViRobot | Backdoor.Linux.S.BPFDoor.1604472 |
| alibabacloud | Backdoor:Linux/SAgnt.Gen |
| huorong | Backdoor/Linux.BPFdoor.a |