Analysis

  • max time kernel
    130s
  • max time network
    145s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    29/06/2024, 01:42

General

  • Target

    bb67ed07426e50d0812ef55b0ea915bcf16285ff56313aef72ccfbd47511ca66.elf

  • Size

    61KB

  • MD5

    6768d50b0cedd046af48d3d1a8d487d9

  • SHA1

    5cafc1aa472e9f9dd4085ce2734d6f8d42604326

  • SHA256

    bb67ed07426e50d0812ef55b0ea915bcf16285ff56313aef72ccfbd47511ca66

  • SHA512

    ec9cfecd8837ca05ccec8ae04458fb50431b2e028fca65fbf6ff47cc1c9615775a85f0d3f0332aca2f5823c2fe82f5feb6b5799fb77b67b58bc64de93fc71d97

  • SSDEEP

    1536:MOf6FP7mQT9+CgAf92NJcJjTqUznSzdvPcifVd7c/4CSQY:ff6BaQT9+EMc1TbzS9Pfn7p

Score
7/10

Malware Config

Signatures

  • Loads a kernel module 1 IoCs

    Loads a Linux kernel module, potentially to achieve persistence

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/bb67ed07426e50d0812ef55b0ea915bcf16285ff56313aef72ccfbd47511ca66.elf
    /tmp/bb67ed07426e50d0812ef55b0ea915bcf16285ff56313aef72ccfbd47511ca66.elf
    1⤵
    • Loads a kernel module
    • Writes file to tmp directory
    PID:2831

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads