e2eab5338aa0006916a92e4f9e741adab84d977659d49bf03e6a3bd4b6660a30

Analysis

max time kernel
0s
max time network
128s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
15-08-2024 19:05

Target

9b40b639cec4ddfe9ff15820367ca67d_JaffaCakes118
Size

1.5MB
MD5

9b40b639cec4ddfe9ff15820367ca67d
SHA1

40b22c42d9c10369ec814bf411153c9613fe5a63
SHA256

e2eab5338aa0006916a92e4f9e741adab84d977659d49bf03e6a3bd4b6660a30
SHA512

7a2d95c2321b4dc3a72e4d8876ce8e0f2d8602977c53bac6b1db4985ece6dcc6ce33d93f19ec87a1ea20cbaa4888e6d7b98ef510490eb5b0692394ef07d6b927
SSDEEP

49152:2nilOolLbt1laIunbZsehkxS55555555555555555555555555555555555k55w1:yeOolLbt1laIunlsehNNtYi7COEm

Score

7^/10

rootkit

Loads a kernel module 1 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2315	9b40b639cec4ddfe9ff15820367ca67d_JaffaCakes118

/tmp/9b40b639cec4ddfe9ff15820367ca67d_JaffaCakes118
/tmp/9b40b639cec4ddfe9ff15820367ca67d_JaffaCakes118
1⤵
- Loads a kernel module
PID:2315