Local reference
Suspicious dependency
Inferred
Mal-ecule
H(Po)Md₂(Bi₂He)
Objectives
component severity, 80% confident.
anti-analysis/vm-detect
Extremely low logic density (function sparsity)
component severity, 100% confident.
anti-static/obfuscation/control-flow
Sparse visible string surface
component severity, 70% confident.
anti-static/obfuscation/payload
Zero recovered functions
component severity, 95% confident.
evasion/anti-av
__vdso exported symbol string
Micro-behaviors
baseline severity, 100% confident.
fs/path/device
/dev/null (legitimate discard device)
Metadata
notable severity, 85% confident.
binary/anomaly
ELF hardening profile suggests private
notable severity, 90% confident.
hardening
No stack canary (stack smashing protection absent)
baseline severity, 100% confident.
binary
Binary format is identified
baseline severity, 90% confident.
binary/linking
ELF dynamic section name
baseline severity, 100% confident.
binary/metrics
Binary has low average string entropy
baseline severity, 100% confident.
unsigned
Binary is not digitally signed
component severity, 90% confident.
binary/section
Tiny C string section ratio
Identity
| SHA-256 | cd7bb7173c8c6c6779c9fbcaac03fecb8a181116f7a91bbbba3ed1e3bc3b4be8 |
|---|---|
| Filename | cd7bb7173c8c6c6779c9fbcaac03fecb8a181116f7a91bbbba3ed1e3bc3b4be8.elf |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 17 May 2026 15:12 UTC |
|---|---|
| First analyzed | 17 May 2026 15:33 UTC |
| Last analyzed | 17 May 2026 15:33 UTC |
| Last updated | 18 May 2026 09:02 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 60127 |
Not seeing what you expected? Let us know