Categories: Malware

About “ELF:DDoS-Y [Trj]” infection

The ELF:DDoS-Y [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What ELF:DDoS-Y [Trj] virus can do?

Injection (inter-process)
Uses Windows utilities for basic functionality
Attempts to repeatedly call a single API many times in order to delay analysis time
A potential decoy document was displayed to the user
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine ELF:DDoS-Y [Trj]?


File Info:
crc32: 124C4C35md5: 089a20cf6b2380348f603acf70d8e998name: tmpjxmz3whjsha1: 35772dc687046cc5355e2ecce9755854a3a712a8sha256: 9cea84dfd053ac2159bde7173a58d2c1b6eb54b712b8e3cc67517a3e70dd833csha512: caf1185d2cd12ffc86261133c2ce59841f278f0fb958a945d20b70951aab7a83de8ff0e74df1d528d4435bbdafa0c8a25f36aff737129c6f2c14780f44e3b1e0ssdeep: 3072:QF3AfURwbBosQJhpxNjdXtm0+EP+03a7lj:QFQQJhpxNZdm0+EP+03a7ljtype: ELF 32-bit MSB  executable, PowerPC or cisco 4500, version 1 (SYSV), statically linked, not stripped
Version Info:
0: [No Data]

ELF:DDoS-Y [Trj] also known as:

ClamAV	Unix.Trojan.Mirai-5607483-0
McAfee	Linux/HeliBot!089A20CF6B23
Sangfor	Malware
Arcabit	Trojan.Trojan.Linux.Gafgyt.5
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Linux/Gafgyt.ASH
TrendMicro-HouseCall	Backdoor.Linux.BASHLITE.SMJC10
Avast	ELF:DDoS-Y [Trj]
Cynet	Malicious (score: 85)
Kaspersky	HEUR:Backdoor.Linux.Mirai.b
BitDefender	Gen:Variant.Trojan.Linux.Gafgyt.5
NANO-Antivirus	Trojan.Mirai.hhbwfj
MicroWorld-eScan	Gen:Variant.Trojan.Linux.Gafgyt.5
Rising	Backdoor.Mirai!8.E05B (TFE:15:3tVhtlFBIcM)
Ad-Aware	Gen:Variant.Trojan.Linux.Gafgyt.5
Emsisoft	Gen:Variant.Trojan.Linux.Gafgyt.5 (B)
F-Secure	Malware.LINUX/Gafgyt.pmkqn
DrWeb	Linux.BackDoor.Fgt.203
TrendMicro	Backdoor.Linux.BASHLITE.SMJC10
McAfee-GW-Edition	Linux/HeliBot!089A20CF6B23
FireEye	Gen:Variant.Trojan.Linux.Gafgyt.5
Sophos	Mal/Generic-S
Ikarus	Trojan.Linux.Gafgyt
Cyren	ELF/Trojan.YEXM-7
Jiangmin	Backdoor.Linux.eltw
Avira	LINUX/Gafgyt.pmkqn
Fortinet	ELF/Mirai.BO!tr
Antiy-AVL	Trojan[Backdoor]/Linux.Mirai.b
AegisLab	Trojan.Linux.Mirai.K!c
ZoneAlarm	HEUR:Backdoor.Linux.Mirai.b
Avast-Mobile	ELF:DDoS-S [Trj]
AhnLab-V3	Linux/Gafgyt.Gen44
ALYac	Gen:Variant.Trojan.Linux.Gafgyt.5
Tencent	Linux.Backdoor.Mirai.Glu
MAX	malware (ai score=88)
GData	Linux.Trojan.Gafgyt.B
BitDefenderTheta	Gen:NN.Mirai.34106
AVG	ELF:DDoS-Y [Trj]
Qihoo-360	Linux/Backdoor.6f4