Resubmissions

04/07/2026, 17:40

260704-v9bbvaay8t10

03/07/2026, 12:17

260703-pgdnlsdz2m10

General

  • Target
    sshd
  • Size 1.1MB
  • Sample260703-pgdnlsdz2m
  • SHA256 de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: SSHdKit,SSHDoor

    SSHdKit aka SSHDoor is a Linux credential-theft trojan, backdoor, rootkit that injects itself into the SSH daemon process to silently intercept and exfiltrate usernames and passwords.

  • Detects SSHdKit aka SSHDoor 1 IoCs

File Explorer

  • sshd
    .elf 1.1MB

sshd

  • SHA256 de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects SSHdKit aka SSHDoor