General

  • Target
    sshd
  • Size 1.1MB
  • Sample260916-ppqyxabl2v
  • SHA256 de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: SSHdKit,SSHDoor

    SSHdKit aka SSHDoor is a Linux credential-theft trojan, backdoor, rootkit that injects itself into the SSH daemon process to silently intercept and exfiltrate usernames and passwords.

  • Detects SSHdKit aka SSHDoor 1 IoCs

File Explorer

  • sshd
    .elf 1.1MB

sshd

  • SHA256 de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects SSHdKit aka SSHDoor