× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 5c8c41253aa68adeb955e7d1c7b8e084e06537f75eff12c3f3a0f3cb30cb2152
File name: 5c8c41253aa68adeb955e7d1c7b8e084e06537f75eff12c3f3a0f3cb30cb2152
Detection ratio: 36 / 57
Analysis date: 2018-10-17 23:42:16 UTC ( 1 month, 3 weeks ago )
Antivirus Result Update
Ad-Aware Linux.Trojan.Agent.A 20181017
AegisLab Trojan.Linux.Agent.m!c 20181017
AhnLab-V3 Linux/Pnscan.1203885 20181017
ALYac Linux.Trojan.Agent.A 20181017
Arcabit Linux.Trojan.Agent.A 20181017
Avast ELF:PNScan-AG [PUP] 20181017
AVG ELF:PNScan-AG [PUP] 20181017
Avira (no cloud) LINUX/PNScan.7 20181017
BitDefender Linux.Trojan.Agent.A 20181017
CAT-QuickHeal Linux/Svirtu.PR77f 20181013
ClamAV Unix.Malware.Agent-1393485 20181017
Cyren ELF/Trojan.WGDB-0 20181018
DrWeb Linux.PNScan.2 20181017
Emsisoft Linux.Trojan.Agent.A (B) 20181017
ESET-NOD32 Linux/PNScan.A 20181017
F-Secure Linux.Trojan.Agent.A 20181017
Fortinet ELF/PnScan2.A!tr 20181018
GData Linux.Trojan.Agent.A 20181017
Ikarus Trojan.Linux.Agent 20181017
Jiangmin Backdoor.Linux.anx 20181017
K7AntiVirus Trojan ( 0001140e1 ) 20181017
K7GW Trojan ( 0001140e1 ) 20181017
Kaspersky Backdoor.Linux.Agent.ae 20181017
MAX malware (ai score=100) 20181018
Microsoft Trojan:Linux/Pienscan.A 20181017
eScan Linux.Trojan.Agent.A 20181017
NANO-Antivirus Trojan.Elf32.Agent.ebdaxn 20181018
Qihoo-360 Win32/Backdoor.cfd 20181018
Sophos AV Mal/Generic-S 20181017
Symantec Linux.Raubdo 20181017
Tencent Linux.Backdoor.Agent.Dztv 20181018
TrendMicro ELF_RAUBIDO.A 20181017
TrendMicro-HouseCall ELF_RAUBIDO.A 20181017
VBA32 Linux.PNScan.2 20181017
Zillya Downloader.OpenConnection.JS.135746 20181017
ZoneAlarm by Check Point Backdoor.Linux.Agent.ae 20181017
Alibaba 20180921
Antiy-AVL 20181017
Avast-Mobile 20181017
Babable 20180918
Baidu 20181017
Bkav 20181017
CMC 20181017
CrowdStrike Falcon (ML) 20180723
Cybereason 20180225
Cylance 20181018
eGambit 20181018
Endgame 20180730
F-Prot 20181017
Sophos ML 20180717
Kingsoft 20181018
Malwarebytes 20181017
McAfee 20181017
McAfee-GW-Edition 20181017
Palo Alto Networks (Known Signatures) 20181018
Panda 20181017
Rising 20181017
SentinelOne (Static ML) 20181011
SUPERAntiSpyware 20181015
Symantec Mobile Insight 20181001
TACHYON 20181017
TheHacker 20181015
TotalDefense 20181017
Trustlook 20181018
VIPRE 20181017
ViRobot 20181017
Webroot 20181018
Yandex 20181017
Zoner 20181017
The file being studied is an ELF! More specifically, it is a EXEC (Executable file) ELF for Unix systems running on MIPS R3000 machines.
ELF Header
Class ELF32
Data 2's complement, little endian
Header version 1 (current)
OS ABI UNIX - System V
ABI version 0
Object file type EXEC (Executable file)
Required architecture MIPS R3000
Object file version 0x1
Program headers 2
Section headers 0
Packers identified
upx
ELF Segments
Segment without sections
Segment without sections
ExifTool file metadata
MIMEType
application/octet-stream

CPUByteOrder
Little endian

CPUArchitecture
32 bit

FileType
ELF executable

ObjectFileType
Executable file

CPUType
MIPS R3000

File identification
MD5 856f14251f643bac62b9193c54449472
SHA1 be4b4f732e26d32a8d02504a252a1ab4832f2cce
SHA256 5c8c41253aa68adeb955e7d1c7b8e084e06537f75eff12c3f3a0f3cb30cb2152
ssdeep
24576:Htt6KVUUKdedoZworM9X+LwxiY3ggL25NMPc71QeCdvrrZnSlHWlnq:Hv6KVU2d2vsL1fL2rDlevrNnS5WM

File size 1.1 MB ( 1203885 bytes )
File type ELF
Magic literal
ELF 32-bit LSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, stripped

TrID ELF Executable and Linkable format (generic) (100.0%)
Tags
elf upx via-tor

VirusTotal metadata
First submission 2015-07-24 08:46:08 UTC ( 3 years, 4 months ago )
Last submission 2018-09-29 06:45:03 UTC ( 2 months, 1 week ago )
File names 5c8c41253aa68adeb955e7d1c7b8e084e06537f75eff12c3f3a0f3cb30cb2152
20151004-141516-335fe012-stdin.log
20151004-193755-55ef93c1-stdin.log
20151004-191427-cb4f4160-stdin.log
stdin
5c8c41253aa68adeb955e7d1c7b8e084e06537f75eff12c3f3a0f3cb30cb2152
Linux.PNScan.2.MIPSEL
20151006-021207-d5f1e16c-stdin.log
VirusShare_856f14251f643bac62b9193c54449472
5c8c41253aa68adeb955e7d1c7b8e084e06537f75eff12c3f3a0f3cb30cb2152
5c8c41253aa68adeb955e7d1c7b8e084e06537f75eff12c3f3a0f3cb30cb2152
20151004-152607-d924af52-stdin.log
20151004-212153-d98f6eb8-stdin.log
daemon.mipsel.mod
20151005-141956-2567dbea-stdin.log
20150909-110030-2eaa71d3-stdin.log
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!