Open-source atomic malware analysis

Analyze another

d5d55e7f8c5a14d64661d27688ec481c415ef6a8aad73ec4b911403d30d83d7d.elf

ELF
Verdict: BENIGN
Mal-ecule
H(Po)Md₂(Bi₂He)
Size 76.9 KB download
First seen 103 days ago
Analyzed 89 days ago

Objectives

component severity, 80% confident.
anti-static/obfuscation Executable section with very low entropy
component severity, 85% confident.
lateral-movement/brute-force Service account ubuntu

Micro-behaviors

baseline severity, 100% confident.
fs/path/device /dev/null (legitimate discard device)
component severity, 90% confident.
communications/proxy SOCKS5 client greeting bytes

Metadata

notable severity, 96% confident.
binary ELF binary has trailing overlay data
notable severity, 80% confident.
hardening No full symbol table (likely stripped)
baseline severity, 90% confident.
binary/linking ELF imports zero needed libraries
baseline severity, 100% confident.
binary/metrics Binary has low average complexity
baseline severity, 95% confident.
lang/compiler Rust-compiled binary
baseline severity, 100% confident.
unsigned Binary is not digitally signed
component severity, 70% confident.
binary/anomaly ELF built with only partial RELRO
component severity, 90% confident.
binary/section Tiny C string section ratio

Identity

SHA-256 d5d55e7f8c5a14d64661d27688ec481c415ef6a8aad73ec4b911403d30d83d7d
Filename d5d55e7f8c5a14d64661d27688ec481c415ef6a8aad73ec4b911403d30d83d7d.elf

Origin

Source harvest

Timeline

First seen 17 May 2026 20:46 UTC
First analyzed 31 May 2026 14:12 UTC
Last analyzed 31 May 2026 14:12 UTC
Last updated 31 May 2026 14:12 UTC

Labeling

Label bad
Label source harvest
Traits version 176d6