6dd6b92ddf85b37d7b4defa42dbfdf68c1acd261468cf045206eef81327e0858

Analysis

max time kernel
0s
max time network
128s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
29-07-2024 14:47

Target

4d1c64d05b5db7adfbbb537d71f70ad8_JaffaCakes118
Size

1.5MB
MD5

4d1c64d05b5db7adfbbb537d71f70ad8
SHA1

e722cd4ddbffc88275e3329cb58d16eded7fc48d
SHA256

6dd6b92ddf85b37d7b4defa42dbfdf68c1acd261468cf045206eef81327e0858
SHA512

850a6952cdbaf775dc8ff3b8fe62ad9353acdda310b2959880187610432c4b9727fe7ba4a556b4fd060f5d62a0c137a8a6a60f5d1d956191ef7d8557a8392d76
SSDEEP

24576:GA46TrzJBisiOvhlOHdSbQmHyJgf/kgX0Exb2cyaGpIoiMJnnLmYXqSYKKZdTrnD:zRNi6OHdSbQoyJyXpxb2PaGpXiMJnLmB

Score

7^/10

rootkit

Loads a kernel module 1 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2442	4d1c64d05b5db7adfbbb537d71f70ad8_JaffaCakes118

/tmp/4d1c64d05b5db7adfbbb537d71f70ad8_JaffaCakes118
/tmp/4d1c64d05b5db7adfbbb537d71f70ad8_JaffaCakes118
1⤵
- Loads a kernel module
PID:2442