Local reference
Suspicious dependency
Inferred
Mal-ecule
O(Er₂)
Objectives
suspicious severity, 95% confident.
evasion/anti-av
SyscallTrampoline function
notable severity, 85% confident.
evasion/kernel-hide/lkm
Inline assembly with direct syscall
Micro-behaviors
component severity, 88% confident.
data/text/keywords
Codebase deletion target
Identity
| SHA-256 | 7d6505f97de9b2aea7d3dc11961c95b57398bcc1da6ba2f5a8e97c7bc7331eb3 |
|---|---|
| Filename | syscall_trampoline_x64.asm |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 4 Jun 2026 23:17 UTC |
|---|---|
| First analyzed | 7 Jun 2026 01:23 UTC |
| Last analyzed | 7 Jun 2026 01:23 UTC |
| Last updated | 7 Jun 2026 01:23 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 318d5 |
Not seeing what you expected? Let us know