General

  • Target
    sshd
  • Size 828KB
  • Sample261005-g57ycsvgmc
  • SHA256 7ccd748e7cd3cc2cb747b87bdbdac4c23ad118837b496a19e7f69596dc256ed8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: SSHdKit,SSHDoor

    SSHdKit aka SSHDoor is a Linux credential-theft trojan, backdoor, rootkit that injects itself into the SSH daemon process to silently intercept and exfiltrate usernames and passwords.

  • Detects SSHdKit aka SSHDoor 1 IoCs

File Explorer

  • sshd
    .elf 828KB

sshd

  • SHA256 7ccd748e7cd3cc2cb747b87bdbdac4c23ad118837b496a19e7f69596dc256ed8
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects SSHdKit aka SSHDoor