edfe81babf50c2506853fd8375f1be0b7bebbefb2e5e9a33eff95ec23e867de1

Classification: Malicious

edfe81babf50c2506853fd8375f1be0b7bebbefb2e5e9a33eff95ec23e867de1 is a trojan (Linux ELF executable, 1.5 MB). Linked to Conti malware.

Detection summary

  • 25 antivirus detections (58% detection ratio)
  • 0 IDS alerts
  • 3 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CONTI (S0575)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-09-09 10:04:59 2026-10-10 10:12:12 malicious-activity
Generic Malware Hybrid-Analysis 2023-05-19 10:45:04 2023-05-19 11:00:05
Conti ThreatFox Abuse.ch 2022-12-07 05:06:23 2022-12-07 05:18:36 S0575 Conti

Tags

backdoor ransomware elf.conti conti locker

Sample information

Filenames
edfe81babf50c2506853fd8375f1be0b7bebbefb2e5e9a33eff95ec23e867de1.elf
File type
ELF 64-bit LSB executable, x86-64, version 1 (SYSV ...
Size
1529773 bytes
MD5
486bd1fe562ce0c339a6c0ec8df68284
SHA-1
79a2a29407c7332240a797fcdea327ea88e32cd2
SHA-256
edfe81babf50c2506853fd8375f1be0b7bebbefb2e5e9a33eff95ec23e867de1
First indexed
2022-12-07 05:18:36
Last updated
2026-03-19 16:53:43

Antivirus detections

EngineDetection
MicroWorld-eScanTrojan.Generic.32380713
SymantecTrojan.Gen.NPE
ESET-NOD32Linux/Filecoder.Conti.A
CynetMalicious (score: 99)
KasperskyHEUR:Trojan-Ransom.Linux.Agent.gen
BitDefenderTrojan.Generic.32380713
RisingRansom.Conti/Linux!8.15360 (CLOUD)
Ad-AwareTrojan.Generic.32380713
EmsisoftTrojan.Generic.32380713 (B)
DrWebLinux.Encoder.135
VIPRETrojan.Generic.32380713
TrendMicroTrojan.Linux.CONTI.USELVL622
McAfee-GW-EditionArtemis!Trojan
FireEyeTrojan.Generic.32380713
GDataTrojan.Generic.32380713
JiangminTrojan.Linux.cdx
AviraLINUX/Ransom.Conti.cglje
MAXmalware (ai score=87)
Antiy-AVLTrojan[Ransom]/Linux.Conti.a
MicrosoftTrojan:Linux/Multiverze
ArcabitTrojan.Generic.D1EE1729
AhnLab-V3Ransomware/Linux.Conti.1529773
ALYacTrojan.Ransom.Linux.Gen
TencentLinux.Trojan.Agent.Ewnw
FortinetLinux/Filecoder_Conti.A!tr

Process list

NameCommand line
timeout/usr/bin/timeout
sudo/usr/bin/sudo
edfe81babf50c2506853fd8375f1be0b7bebbefb2e5e9a33eff95ec23e867de1.elf/home/ubuntu/edfe81babf50c2506853fd8375f1be0b7bebbefb2e5e9a33eff95ec23e867de1.elf