56eec56d41bfd45030434d9b1b11aab47967384e3338c5768f8b8b4e9eb72392

Analysis

max time kernel
120s
max time network
128s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
02/07/2024, 01:13

Target
2afad3000fe7a4296784a77f2f8260ca63e78e49dfe2805b32a2988279f54d00.elf
Size 126KB
Sample240702-ble6cavckl
SHA256 2afad3000fe7a4296784a77f2f8260ca63e78e49dfe2805b32a2988279f54d00
MD5 31eb7167786e06c845447718015150f7
SHA1 12b9bfda38eb82ca5b841cb5337a0188116b1f76
SHA512 f9090b4fe4395cb151f8244aad65732905d26efebcd9eaab8b52269ae3fa2b8fd2db98d5d4cfed0af4cdf4befdc17ebd9917bf09dd9c4cc6845d9f1ad09a5906
SSDEEP 3072:5ONREDGywWyfKgXBabetJ8add9QzTsGR5uqJcT5t47KcX6GcgqBK:WERuXxabetJ8addQhk5t47KcXJcgqBK
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

rootkit

Loads a kernel module 10 IoCs

Loads a Linux kernel module, potentially to achieve persistence

/tmp/2afad3000fe7a4296784a77f2f8260ca63e78e49dfe2805b32a2988279f54d00.elf
/tmp/2afad3000fe7a4296784a77f2f8260ca63e78e49dfe2805b32a2988279f54d00.elf
1⤵
PID:2499