Analysis
-
max time kernel
149s -
max time network
148s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
17-08-2024 19:37
Static task
static1
Behavioral task
behavioral1
Sample
bot.x86.elf
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
1 signatures
150 seconds
General
-
Target
bot.x86.elf
-
Size
87KB
-
MD5
de2a76494897c5d383ff0db55ad6116a
-
SHA1
e82adcef0ac2047a33932f1d3e3068d96eb0f71f
-
SHA256
ffd7501cc19989c35f6902cc4244f95851d6f0db9ccf42fc88610bb9826d95ce
-
SHA512
5fcab611ddd0cdab5ebe889aeeace1c8fd4ca9e69114fb889d0b2e6273663c3ac1d0350b4a7ce593b58ca52031b217e92c6c144832a6eba7454836ae745c9d4c
-
SSDEEP
1536:xpmWc2AcighsZ82fJxfcmHH1mSsM8y6Q+gBQ9TnkISGtAdP0xZ:xpmX2riED2frfxHVmL1Q1Q9kVTP0x
Score
7/10
Malware Config
Signatures
-
Loads a kernel module 46 IoCs
Loads a Linux kernel module, potentially to achieve persistence
Processes:
bot.x86.elfpid Process 2840 bot.x86.elf 2840 bot.x86.elf 2841