a6e1f777a2a55c58d6ded153ce936b15fa89cfa9d060e0a754154946020c502b

Analysis

max time kernel
0s
max time network
132s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
10-08-2024 13:48

Target

864ae8bcb04cda51edf97f775e994843_JaffaCakes118
Size

1.5MB
MD5

864ae8bcb04cda51edf97f775e994843
SHA1

375c90e4dc7a39856896fd17dcc46c74c2310b38
SHA256

a6e1f777a2a55c58d6ded153ce936b15fa89cfa9d060e0a754154946020c502b
SHA512

20dce928b45970817f5d2eb2c6accf38226b239b2abd33910c2f3bb58f499186c61fe9ab7bbfe5c7b3befaba70591f6d356dee15722a92d1b50f42d1548a1d45
SSDEEP

24576:GA46TrzJBisiOvhlOHdSbQmHyJgf/kgX0Exb2cyaGpIoiMlnnLmYXqSYKKZdTrnD:zRNi6OHdSbQoyJyXpxb2PaGpXiMlnLmB

Score

7^/10

rootkit

Loads a kernel module 1 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2819	864ae8bcb04cda51edf97f775e994843_JaffaCakes118

/tmp/864ae8bcb04cda51edf97f775e994843_JaffaCakes118
/tmp/864ae8bcb04cda51edf97f775e994843_JaffaCakes118
1⤵
- Loads a kernel module
PID:2819