9bac5b97cd7a4889708473ef9f338e7804e78d76a1e2aa904c20c0fdf9b8c690

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
29/07/2024, 21:14

Target

609743580c6929e6084d46fc904b2f56_JaffaCakes118
Size

60KB
MD5

609743580c6929e6084d46fc904b2f56
SHA1

19cf060ce33a572bcc0f705ef0bab6ac65cbe822
SHA256

9bac5b97cd7a4889708473ef9f338e7804e78d76a1e2aa904c20c0fdf9b8c690
SHA512

5945aaf7a403295c4541345f65285356f710274355ee45c25382d5bbd9b2a3dd5e808be46ae2c195365a99c5832cd932437a1be94170a2ec7ed11481e7ec91b3
SSDEEP

1536:VMzVhePhrkmetvEuckIzN/hkfgiu5BkM56w8aJBmLUoBiAFpTLE:VMzVhePlkmetvBcxJhyu5BN5KaJU5oAf

Score

7^/10

rootkit

Loads a kernel module 1 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2426	609743580c6929e6084d46fc904b2f56_JaffaCakes118

/tmp/609743580c6929e6084d46fc904b2f56_JaffaCakes118
/tmp/609743580c6929e6084d46fc904b2f56_JaffaCakes118
1⤵
- Loads a kernel module
PID:2426