Open-source atomic malware analysis

Analyze another

911a91c41cfe854dc0a5000694d5495157652a91c7d147c3b83efab0487b5020.elf

ELF
Verdict: BENIGN
SHA256: 911a91c41cfe854dc0a5000694d5495157652a91c7d147c3b83efab0487b5020 · 97%
Mal-ecule
H(Po)Md₂(Bi₂He)
Size 60.9 KB download
First seen 103 days ago
Analyzed 89 days ago

Objectives

component severity, 100% confident.
anti-static/obfuscation/control-flow Sparse visible string surface
component severity, 85% confident.
lateral-movement/brute-force Service account ubuntu

Micro-behaviors

baseline severity, 100% confident.
fs/path/device /dev/null (legitimate discard device)
component severity, 90% confident.
communications/proxy SOCKS5 client greeting bytes

Metadata

notable severity, 96% confident.
binary ELF overlay exceeds 512 bytes
notable severity, 80% confident.
hardening No full symbol table (likely stripped)
baseline severity, 90% confident.
binary/linking ELF imports zero needed libraries
baseline severity, 100% confident.
binary/metrics Binary has low average complexity
baseline severity, 100% confident.
unsigned Binary is not digitally signed
component severity, 70% confident.
binary/anomaly ELF built with only partial RELRO
component severity, 90% confident.
binary/section Tiny C string section ratio

Identity

SHA-256 911a91c41cfe854dc0a5000694d5495157652a91c7d147c3b83efab0487b5020
Filename 911a91c41cfe854dc0a5000694d5495157652a91c7d147c3b83efab0487b5020.elf

Origin

Source harvest

Timeline

First seen 17 May 2026 15:12 UTC
First analyzed 31 May 2026 10:38 UTC
Last analyzed 31 May 2026 10:38 UTC
Last updated 31 May 2026 10:38 UTC

Labeling

Label bad
Label source harvest
Traits version 52045