5cb31d8bff6cf1e1c2fd3c920b78591bdce98b3eafd0ac99c57afe7f30da159f

Analysis

max time kernel
0s
max time network
128s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
02-07-2024 01:25

Target

5cb31d8bff6cf1e1c2fd3c920b78591bdce98b3eafd0ac99c57afe7f30da159f.elf
Size

53KB
MD5

f99b001bb429bf07902e71d0553e11e8
SHA1

4ce6ffb2c283c13e16671af175f00d28e8a48c1c
SHA256

5cb31d8bff6cf1e1c2fd3c920b78591bdce98b3eafd0ac99c57afe7f30da159f
SHA512

2e7834129c2b9d34f6c45eb7211402fd1d033e4179f26854c644f3ae6e11c4a20317de0785280f74ba8a9ad5a2934e5e7476bafea65e2dc3f8233b617b88cdcf
SSDEEP

1536:ICzTgxVwPMSMtcKpA4y0KpEhQGLfMkXLCPfN0:ICnewPMltcIA4mpYQsxbC3N0

Score

7^/10

rootkit

Loads a kernel module 1 IoCs
Loads a Linux kernel module, potentially to achieve persistence
rootkit

Processes:

5cb31d8bff6cf1e1c2fd3c920b78591bdce98b3eafd0ac99c57afe7f30da159f.elf

pid process

2524 5cb31d8bff6cf1e1c2fd3c920b78591bdce98b3eafd0ac99c57afe7f30da159f.elf

pid	process
2524	5cb31d8bff6cf1e1c2fd3c920b78591bdce98b3eafd0ac99c57afe7f30da159f.elf

/tmp/5cb31d8bff6cf1e1c2fd3c920b78591bdce98b3eafd0ac99c57afe7f30da159f.elf
/tmp/5cb31d8bff6cf1e1c2fd3c920b78591bdce98b3eafd0ac99c57afe7f30da159f.elf
1⤵
- Loads a kernel module
PID:2524