34847c24984fcd6f3e0cad1ed7eafcb70db20583a59f0e84df3ea42c0c7659b6

Analysis

max time kernel
0s
max time network
128s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
28-07-2024 04:09

Target

0894ee1d6e43f54343f21fb8dc4b385c_JaffaCakes118
Size

1.5MB
MD5

0894ee1d6e43f54343f21fb8dc4b385c
SHA1

e94f9108770a3192230a9737adc2d7a541f25eb3
SHA256

34847c24984fcd6f3e0cad1ed7eafcb70db20583a59f0e84df3ea42c0c7659b6
SHA512

8c260c48edbd1d5087b3baf30dfb6b0ed3063d86bfdadba251907514d8fc3d6c3f990ee20734b9b44b307b91294099a40ec1e4dd584954319c76f358e283b4e8
SSDEEP

24576:GA46TrzJBisiOvhlOHdSbQmHyJgf/kgX0Exb2cyaGpIoiMKnnLmYXqSYKKZdTrnD:zRNi6OHdSbQoyJyXpxb2PaGpXiMKnLmB

Score

7^/10

rootkit

Loads a kernel module 1 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2440	0894ee1d6e43f54343f21fb8dc4b385c_JaffaCakes118

/tmp/0894ee1d6e43f54343f21fb8dc4b385c_JaffaCakes118
/tmp/0894ee1d6e43f54343f21fb8dc4b385c_JaffaCakes118
1⤵
- Loads a kernel module
PID:2440