TF-MAL-elf.rotajakiro

Description

ThreatFox malware family `elf.rotajakiro`. Printable name: RotaJakiro.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Malware analysis RotaJakiro.malware Malicious activity - any.run
  web:any.run

  Online sandbox report for RotaJakiro . malware , verdict: Malicious activity

  2026-05-22 05:23 UTC
• RotaJakiro, Software S1078 | MITRE ATT&CK®
  web:attack.mitre.org

  RotaJakiro is a 64-bit Linux backdoor used by APT32. First seen in 2018, it uses a plugin architecture to extend capabilities. RotaJakiro can determine it's permission level and execute according to access type (root or user). [1] [2]

  2026-05-22 05:23 UTC
• Malware RotaJakiro - NoHackMe
  web:cve.nohackme.com

  RotaJakiro is a 64-bit Linux backdoor used by APT32. First seen in 2018, it uses a plugin architecture to extend capabilities. RotaJakiro can determine it's permission level and execute according to access type (`root` or `user`). Platforms : Linux Version : 1.0 Created : 14 June 2023 Last Modified : 12 October 2023

  2026-05-22 05:23 UTC
• BPFDoor and Symbiote Rootkits Attacking Linux Systems Exploiting eBPF ...
  web:cybersecuritynews.com

  Two sophisticated Linux rootkits are posing increasingly serious threats to network security by exploiting eBPF technology to hide their presence from traditional detection systems. BPFDoor and Symbiote, both originating from 2021, represent a dangerous class of malware that combines advanced kernel-level access with powerful evasion capabilities.

  2026-05-22 05:23 UTC
• RotaJakiro (Malware Family) - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  RotaJakiro is a stealthy Linux backdoor which remained undetected between 2018 and 2021. The malware uses rotating encryption to encrypt the resource information within the sample, and C2 communication, using a combination of AES, XOR, ROTATE encryption and ZLIB compression.

  2026-05-22 05:23 UTC
• RotaJakiro Writeup — Cyberdefenders' Lab - Medium
  web:medium.com

  RotaJakiro Writeup — Cyberdefenders' Lab RotaJakiro | Blue team challenge. RotaJakiro is a blue team lab that falls under the Malware Analysis category and will cover the following …

  2026-05-22 05:23 UTC
• Trellix Insights: RotaJakiro Linux Backdoor
  web:support.trellix.com

  Summary Description of Campaign RotaJikaro has recently been identified as a backdoor malware targeting 64-bit Linux systems. Although RotaJikaro was first submitted to VirusTotal in 2018, it has remained mostly undetected until recently. It has been found to target device information, steal sensitive data, conduct file and Plugin management, as well as execute additional Plugins received from ...

  2026-05-22 05:23 UTC
• New eBPF Filters for Symbiote and BPFdoor Malware
  web:www.fortinet.com

  FortiGuard Labs discovered new Symbiote and BPFDoor variants exploiting eBPF filters to enhance stealth through IPv6 support, UDP traffic, and dynamic port hopping for covert C2 communication.

  2026-05-22 05:23 UTC
• Automated Malware Analysis Management Report for RotaJakiro.malware ...
  web:www.joesandbox.com

  General Information Sample name: RotaJakiro . malware Analysis ID: 1658086 MD5: 65f5b913b7fa46d907e797d1f202817d SHA1: e40103d547fd9ff45529f160a537abb3bd7ebbd4 SHA256 ...

  2026-05-22 05:23 UTC
• Backdoor.Linux.ROTAJAKIRO.A - Threat Encyclopedia | Trend Micro (US)
  web:www.trendmicro.com

  This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.It executes commands from a remote malicious user, effectively compromising the affected system.

  2026-05-22 05:23 UTC

Only Available for Registered Users. Sign in to view.