General

  • Target
    sshd
  • Size 1.1MB
  • Sample260827-ppvxvsvcka
  • SHA256 ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: SSHdKit,SSHDoor

    SSHdKit aka SSHDoor is a Linux credential-theft trojan, backdoor, rootkit that injects itself into the SSH daemon process to silently intercept and exfiltrate usernames and passwords.

  • Detects SSHdKit aka SSHDoor 1 IoCs

File Explorer

  • sshd
    .elf 1.1MB

sshd

  • SHA256 ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects SSHdKit aka SSHDoor