572731ac1a8bc66fcbf2199f1d725474a7c825b18f1b0094a0a8b150cb7c63b1

Analysis

max time kernel
145s
max time network
149s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
16-08-2024 02:26

Target

9c96dbad62b72bd36a87bb76880d386e_JaffaCakes118
Size

167KB
MD5

9c96dbad62b72bd36a87bb76880d386e
SHA1

43d06f7353b464a64eafda754cf5b3a82a9efc44
SHA256

572731ac1a8bc66fcbf2199f1d725474a7c825b18f1b0094a0a8b150cb7c63b1
SHA512

195d9d84090bd0e28ccb66f43d4a28a1f7daabddfc6d22e26c0bc0eda8fc63406f6fa2b3ab1a6bca5b11c0f7ff0f4c36c985b6aa24510f2260e2e4cddc7cc959
SSDEEP

3072:wY0N66Jai/Vw5otmqvMR3tXfJUqzSTSCv16oDlJ5MImGyRRAmlfQAD+n0i:wlStXfmqGTSW4oDlJ5MImGyRRAmlfQAa

Score

7^/10

rootkit

Loads a kernel module 2 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2821	9c96dbad62b72bd36a87bb76880d386e_JaffaCakes118
2821	9c96dbad62b72bd36a87bb76880d386e_JaffaCakes118

/tmp/9c96dbad62b72bd36a87bb76880d386e_JaffaCakes118
/tmp/9c96dbad62b72bd36a87bb76880d386e_JaffaCakes118
1⤵
- Loads a kernel module
PID:2821