urlquery.net
Investigate/Report/8914d3da-1ec8-41cd-8ba0-4ea1317f0c49
WEBSITE ANALYSIS REPORT

http://emwqkekwqmekwq.work.gd/b_kt

public
Report tags
Submit tags
Request review

Artifacts

Extracted files, shortcuts, Telegram observations, PDF documents, and clipboard content

Files1

Extracted files

1
FILE

File #01

ELF 64-bit LSB executable, x86-64, version 1 (SYSV)

11 alerts

URL

HTTP
http://emwqkekwqmekwq.work.gd/b_kt

IP / ASN

United Arab Emirates 217.60.195.187

AS31549 · Aria Shatel PJSC

Resource information

File type
ELF 64-bit LSB executable, x86-64, version 1 (SYSV)
Size
599.7 KB (614136 bytes)
MD5
1dfa8c4654eae060959f6ac12f4148f5
SHA1
8b81f0ef2c4359fde76cea472aed7ac6219801c5
SHA256
d02a2b2ab354156a83c618bbe18d1d572583f8a07b1098847c2ffa898596b1fa

Attached detections 11

medium
Elastic Security YARA rules Linux.Trojan.Gafgyt

Elastic Security YARA Rules

Sensor
infosec_yara
Verdict
malware
Observed
2026-10-03
Trigger
emwqkekwqmekwq.work.gd/b_kt
Reference
https://github.com/elastic/protections-artifacts/tree/main/yara
Metadata
{"arch_context":"x86","author":"Elastic Security","creation_date":"2021-01-12","fingerprint":"d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50","id":"9e9530a7-ad4d-4a44-b764-437b7621052f","last_modified":"2021-09-16","license":"Elastic License v2","os":"linux","reference_sample":"01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961","rule":"Linux_Trojan_Gafgyt_9e9530a7","scan_context":"file, memory","severity":"100","threat_name":"Linux.Trojan.Gafgyt"}
medium
Elastic Security YARA rules Linux.Trojan.Gafgyt

Elastic Security YARA Rules

Sensor
infosec_yara
Verdict
malware
Observed
2026-10-03
Trigger
emwqkekwqmekwq.work.gd/b_kt
Reference
https://github.com/elastic/protections-artifacts/tree/main/yara
Metadata
{"arch_context":"x86","author":"Elastic Security","creation_date":"2021-01-12","fingerprint":"f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f","id":"807911a2-f6ec-4e65-924f-61cb065dafc6","last_modified":"2021-09-16","license":"Elastic License v2","os":"linux","rule":"Linux_Trojan_Gafgyt_807911a2","scan_context":"file, memory","severity":"100","threat_name":"Linux.Trojan.Gafgyt"}
medium
Elastic Security YARA rules Linux.Trojan.Gafgyt

Elastic Security YARA Rules

Sensor
infosec_yara
Verdict
malware
Observed
2026-10-03
Trigger
emwqkekwqmekwq.work.gd/b_kt
Reference
https://github.com/elastic/protections-artifacts/tree/main/yara
Metadata
{"arch_context":"x86","author":"Elastic Security","creation_date":"2021-01-12","fingerprint":"58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3","id":"d4227dbf-6ab4-4637-a6ba-0e604acaafb4","last_modified":"2021-09-16","license":"Elastic License v2","os":"linux","reference_sample":"01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961","rule":"Linux_Trojan_Gafgyt_d4227dbf","scan_context":"file, memory","severity":"100","threat_name":"Linux.Trojan.Gafgyt"}
medium
Elastic Security YARA rules Linux.Trojan.Gafgyt

Elastic Security YARA Rules

Sensor
infosec_yara
Verdict
malware
Observed
2026-10-03
Trigger
emwqkekwqmekwq.work.gd/b_kt
Reference
https://github.com/elastic/protections-artifacts/tree/main/yara
Metadata
{"arch_context":"x86","author":"Elastic Security","creation_date":"2021-01-12","fingerprint":"e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac","id":"d996d335-e049-4052-bf36-6cd07c911a8b","last_modified":"2021-09-16","license":"Elastic License v2","os":"linux","reference_sample":"b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda","rule":"Linux_Trojan_Gafgyt_d996d335","scan_context":"file, memory","severity":"100","threat_name":"Linux.Trojan.Gafgyt"}
medium
Elastic Security YARA rules Linux.Trojan.Gafgyt

Elastic Security YARA Rules

Sensor
infosec_yara
Verdict
malware
Observed
2026-10-03
Trigger
emwqkekwqmekwq.work.gd/b_kt
Reference
https://github.com/elastic/protections-artifacts/tree/main/yara
Metadata
{"arch_context":"x86","author":"Elastic Security","creation_date":"2021-01-12","fingerprint":"3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6","id":"d0c57a2e-c10c-436c-be13-50a269326cf2","last_modified":"2021-09-16","license":"Elastic License v2","os":"linux","rule":"Linux_Trojan_Gafgyt_d0c57a2e","scan_context":"file, memory","severity":"100","threat_name":"Linux.Trojan.Gafgyt"}
medium
Elastic Security YARA rules Linux.Trojan.Gafgyt

Elastic Security YARA Rules

Sensor
infosec_yara
Verdict
malware
Observed
2026-10-03
Trigger
emwqkekwqmekwq.work.gd/b_kt
Reference
https://github.com/elastic/protections-artifacts/tree/main/yara
Metadata
{"arch_context":"x86","author":"Elastic Security","creation_date":"2021-01-12","fingerprint":"06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307","id":"620087b9-c87d-4752-89e8-ca1c16486b28","last_modified":"2021-09-16","license":"Elastic License v2","os":"linux","reference_sample":"01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961","rule":"Linux_Trojan_Gafgyt_620087b9","scan_context":"file, memory","severity":"100","threat_name":"Linux.Trojan.Gafgyt"}
medium
Elastic Security YARA rules Linux.Trojan.Gafgyt

Elastic Security YARA Rules

Sensor
infosec_yara
Verdict
malware
Observed
2026-10-03
Trigger
emwqkekwqmekwq.work.gd/b_kt
Reference
https://github.com/elastic/protections-artifacts/tree/main/yara
Metadata
{"arch_context":"x86","author":"Elastic Security","creation_date":"2021-01-12","fingerprint":"96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b","id":"0cd591cd-c348-4c3a-a895-2063cf892cda","last_modified":"2021-09-16","license":"Elastic License v2","os":"linux","rule":"Linux_Trojan_Gafgyt_0cd591cd","scan_context":"file, memory","severity":"100","threat_name":"Linux.Trojan.Gafgyt"}
medium
Elastic Security YARA rules Linux.Trojan.Gafgyt

Elastic Security YARA Rules

Sensor
infosec_yara
Verdict
malware
Observed
2026-10-03
Trigger
emwqkekwqmekwq.work.gd/b_kt
Reference
https://github.com/elastic/protections-artifacts/tree/main/yara
Metadata
{"arch_context":"x86","author":"Elastic Security","creation_date":"2021-01-12","fingerprint":"9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e","id":"33b4111a-e59e-48db-9d74-34ca44fcd9f5","last_modified":"2021-09-16","license":"Elastic License v2","os":"linux","reference_sample":"01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961","rule":"Linux_Trojan_Gafgyt_33b4111a","scan_context":"file, memory","severity":"100","threat_name":"Linux.Trojan.Gafgyt"}
medium
Elastic Security YARA rules Linux.Trojan.Gafgyt

Elastic Security YARA Rules

Sensor
infosec_yara
Verdict
malware
Observed
2026-10-03
Trigger
emwqkekwqmekwq.work.gd/b_kt
Reference
https://github.com/elastic/protections-artifacts/tree/main/yara
Metadata
{"arch_context":"x86","author":"Elastic Security","creation_date":"2021-01-12","fingerprint":"74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08","id":"a33a8363-5511-4fe1-a0d8-75156b9ccfc7","last_modified":"2021-09-16","license":"Elastic License v2","os":"linux","rule":"Linux_Trojan_Gafgyt_a33a8363","scan_context":"file, memory","severity":"100","threat_name":"Linux.Trojan.Gafgyt"}
Not recorded
VirusTotal Scan result 17/61

VirusTotal

Sensor
virustotal
Verdict
malicious
Observed
2026-10-01
Trigger
d02a2b2ab354156a83c618bbe18d1d572583f8a07b1098847c2ffa898596b1fa
Comment
malicious - 17/61
Reference
https://www.virustotal.com/gui/file/d02a2b2ab354156a83c618bbe18d1d572583f8a07b1098847c2ffa898596b1fa
medium
ClamAV Unix.Dropper.Mirai-7540662-0

ClamAV

Sensor
clamav
Verdict
malicious
Observed
2026-10-03
Trigger
emwqkekwqmekwq.work.gd/b_kt
Reference
https://www.clamav.net/
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot