Local reference
Suspicious dependency
Inferred
Mal-ecule
O(Er₂)
Objectives
suspicious severity, 95% confident.
evasion/kernel-hide
Uses MAGIC_GID for process/file hiding
notable severity, 100% confident.
evasion/kernel-hide/lkm
Code explicitly mentions malware/backdoor
component severity, 95% confident.
command-and-control/dropper/delivery
Download command handler string
component severity, 80% confident.
command-and-control/reverse-shell
C source references shell path
Micro-behaviors
component severity, 90% confident.
data/text/keywords
Destructive destroy verb
Identity
| SHA-256 | 082995b5c663bf1963daa3301d2c9baaa813635e38e70e9991f604f61ffb0f09 |
|---|---|
| Filename | enter_lxc.c |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 4 Jun 2026 19:46 UTC |
|---|---|
| First analyzed | 9 Jun 2026 18:36 UTC |
| Last analyzed | 9 Jun 2026 18:36 UTC |
| Last updated | 9 Jun 2026 18:36 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 6c97d |
Not seeing what you expected? Let us know